Security audit
Security checks for vulnerabilities and agentic risk
This is a documentation-only Feishu/Lark writing helper with purpose-aligned API examples and no hidden execution or persistence.
Installers should treat Feishu app_secret and access tokens as sensitive: use environment variables or a secret manager, avoid pasting real secrets into shared logs or shell history, and only use the skill with Feishu documents and folders the user intends to modify.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl -X POST 'https://open.feishu.cn/open-apis/auth/v3/app_access_token/internal' \
-H 'Content-Type: application/json' \
-d '{ "app_id": "<app_id>", "app_secret": "<app_secret>" }'
This markdown file documents an authentication flow that requires app_id and app_secret, which are sensitive credentials. The section provides the exact request format but does not include any warning about storing, redacting, or avoiding exposure of these secrets in logs, shell history, or shared examples.
No suspicious patterns detected.