Security audit
Security checks for vulnerabilities and agentic risk
This skill is coherent Feishu permission-management guidance, but it can change document and folder access with broad activation wording and limited safety guidance.
Review this skill carefully before enabling it. It appears focused on Feishu permission management and is disabled by default, but users should only enable it when they want agents to manage Feishu access, and should require explicit confirmation for adding, removing, or granting full_access permissions.
The activation description uses broad terms like sharing, permissions, and collaborators, which are common in normal workplace conversations and could cause the skill to trigger in situations where the user did not intend to manage Feishu access. Because this skill can modify document and folder permissions, accidental invocation increases the risk of unintended disclosure or privilege changes.
The skill documents permission-changing actions, including granting edit and full_access, but does not prominently warn that these operations alter access control and can expose sensitive documents or delegate further permission management. In a permission-management skill, lack of explicit cautions and confirmation guidance makes dangerous actions easier to perform without informed user intent.
No suspicious patterns detected.
