Feishu Agent Mesh

• Analyzed: May 17, 2026, 7:04 AM
• Findings: 1
• Version: 0.1.3
• Hash: 0dfdd3d8aed1f0f95949c5c3f38b4080df8c49ed2f19c0ff9636cfd01b8b9d35
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill provides a blueprint for a Feishu multi-agent coordination mesh, which requires the AI agent to explicitly solicit highly sensitive credentials (App Secrets, Encrypt Keys, and Verification Tokens) from the user. It includes a Node.js webhook server (`feishu-callback-server.js`) designed to decrypt and log all group chat messages to a centralized Feishu Bitable. While these capabilities are aligned with the stated purpose of synchronizing agent state and logging discussions, the requirement for full administrative secrets and the creation of a centralized message repository represent significant security risks and potential for data interception if the relay or storage is misconfigured.