Security audit
Security checks for vulnerabilities and agentic risk
The skill does what it claims, but it can send externally generated voice messages through Feishu and its activation/consent boundaries are too broad for that authority.
Review before installing. Use it only if you want an agent to send Feishu voice-bubble messages using your configured Feishu app and MiniMax account, and avoid sending secrets or regulated/private content unless that third-party processing is acceptable. Require confirmation before any actual send.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
}
def get_tenant_token(app_id: str, app_secret: str) -> str:
"""Get Feishu tenant access token."""
import urllib.request
url = "https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal"
The activation text includes broad phrases like 'send voice message' and 'send audio to Feishu', which can match routine user requests and cause the skill to activate outside a narrowly scoped intent. Because this skill sends content to external services and can transmit messages on a user's behalf, overbroad triggering increases the chance of unintended data sharing or unintended outbound actions.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
Create ~/.openclaw/workspace/skills/minimax-feishu-voice/voice_config.json:
{
The documentation states that user text is sent to MiniMax for TTS and the resulting audio is uploaded to Feishu, but it does not include an explicit privacy warning or user-consent guidance. This is risky because sensitive message content and associated credentials/configured integrations are involved in third-party processing and transmission, which may surprise users or violate privacy expectations.
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
'-v', 'error',
pcm_path
]
result = subprocess.run(cmd_decode, capture_output=True, timeout=30)
if result.returncode != 0:
raise ValueError(f"MP3 decode failed: {result.stderr.decode()}")
subprocess module calls execute external commands. Without careful input validation, this enables command injection.
'-f', 'ogg',
opus_path
]
result = subprocess.run(cmd_encode, capture_output=True, timeout=30)
if result.returncode != 0:
raise ValueError(f"OGG encode failed: {result.stderr.decode()}")
The value female-yujie-jingpin appears to select a specific voice associated with a particular language/locale, and the file provides no indication that users can choose or opt into that setting. This can violate the policy against forcing a specific language or locale without user choice.
No suspicious patterns detected.