乐荐飞书表格

• Analyzed: May 4, 2026, 8:31 AM
• Findings: 1
• Version: 2.4.1
• Hash: 6d03ba5b614d303e411f71714c1c45b1a84942c439d0d92fff6c1e4b629b58f7
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a functional wrapper for the Feishu (Lark) Spreadsheet API. It demonstrates high security awareness by using Python's JSON encoder to safely construct API payloads (preventing injection), implementing local token caching with restricted file permissions (chmod 600), and including explicit instructions in SKILL.md for the AI agent to seek user confirmation before performing destructive actions like deleting sheets or rows. No evidence of data exfiltration, unauthorized file access, or malicious intent was found in scripts/feishu-sheet.sh or the documentation.