Back to plugin

Security audit

Feishu/Lark

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent Feishu/Lark workplace integration with powerful document, drive, wiki, chat, and table tools that are disclosed and configurable.

Install this only for agents that should access your Feishu/Lark workspace. Configure Feishu app scopes narrowly, keep permission management disabled unless needed, restrict which chats/users can invoke the bot, and be cautious with document replacement, Drive deletion/move, Bitable mutation, file upload, and dynamic-agent creation settings.

Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The activation description includes broad trigger terms like 'cloud space', 'folders', and 'document comments', which are common in ordinary user conversations and can cause the skill to activate when the user did not specifically intend Feishu Drive operations. In an integration that can access shared Drive files and comments, unintended invocation increases the chance of unnecessary data exposure or accidental file operations.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The activation description uses broad phrases like 'cloud docs' and 'docx links', which can match ordinary user conversation outside the intended Feishu-specific context. This can cause the skill to activate unexpectedly and steer the agent into document-handling workflows on irrelevant prompts, increasing the chance of unintended tool use or data exposure.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
93% confidence
Finding

The activation description uses broad terms like "knowledge base," "wiki," and "wiki link," which can cause the skill to activate in situations where the user did not specifically intend Feishu wiki operations. This can lead to unintended tool selection and data exposure or confusing behavior, especially in environments with multiple skills or document systems.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.