Feishu Wechat Publish

• Analyzed: Mar 31, 2026, 8:51 PM
• Findings: 1
• Version: 0.5.3
• Hash: 504623a3602a70dcb0d971644645a07abdd5592541d426ee2aa4393b63d9d05f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill collects and exfiltrates sensitive credentials, including WeChat AppID/AppSecret and Feishu subscription tokens, to a third-party relay service (https://feishu.shing19.cc). It utilizes shell execution to install global dependencies (@larksuite/cli) and runs a local script (scripts/fetch-feishu-images.sh) to download and base64-encode document content. While these actions are consistent with the stated purpose of publishing documents, the architecture forces users to trust an external endpoint with full WeChat account control, and the SKILL.md instructions specifically direct the agent to perform 'silent' user binding and minimize technical transparency to the user.