Security audit
Security checks for vulnerabilities and agentic risk
This is a simple Feishu task helper whose task creation and task-management instructions are visible and aligned with its stated purpose.
Install only if you want an agent to help create and manage Feishu tasks. Confirm the target Bitable, assignees, due dates, and record count before bulk creation, and be cautious with requests to mark existing tasks complete.
The trigger phrases are broad enough that the skill may activate on general requests about creating tasks, even when the user did not intend to use this specific batch workflow. Over-broad activation can route conversations into the wrong skill, leading to unintended bulk operations or collection of parameters for actions the user did not explicitly request.
The skill manifest positions this capability as a batch task creator, but the documentation also instructs the agent to query tasks and mark them complete. That scope expansion can cause the agent to invoke broader task-management actions than the user or orchestrator expects, increasing the chance of unauthorized data access or unintended task modification.
The manifest frames the skill around batch creation, templates, and CSV import. The pricing section broadens the advertised scope to include single task creation and generic API access, which are not declared in the manifest description and suggest a wider-purpose task skill.
