Security audit

Feishu Bitable Data Sync

Security checks for vulnerabilities and agentic risk

Overview

This Feishu Bitable sync skill is purpose-aligned but should be reviewed because it can batch create, update, and delete table records without explicit safeguards or confirmation steps.

Review this skill before installing. It is not evidence of malware, but it can modify or delete live Feishu Bitable records in bulk. Use it only when you are comfortable providing exact app_token/table_id values, and require a preview or explicit confirmation before create, update, or delete operations.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 95% confidence
Finding: The trigger phrases are broad enough to activate on generic requests like 'sync data' or 'import/export bitable data', which can cause the agent to invoke this skill in contexts the user did not specifically intend. Because the skill supports reading, creating, updating, and deleting records across tables, accidental invocation can lead to unintended data access or modification rather than being a harmless routing issue.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill prominently documents batch_create, batch_update, and batch_delete capabilities without any explicit warning, safeguard, or confirmation requirement for destructive or bulk data changes. In a data sync skill, this is especially risky because a mistaken mapping, wrong app_token/table_id, or overbroad invocation could propagate unwanted changes or deletions across many records quickly.

Static analysis

No suspicious patterns detected.