Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Feishu progress-notification helper with disclosed periodic status messages and no executable code.
Install this if you want long-running Feishu tasks to post brief progress heartbeats. Review whether periodic task-status messages are acceptable in your Feishu workspace, especially for sensitive task names or confidential work, and note that the bundled examples are Chinese-oriented.
The file content is entirely in Chinese and does not offer an alternative language or indicate that Chinese is an optional or context-specific locale choice. This can violate language/locale policy when a skill effectively forces one language without user opt-in.
The percentage mapping and reply-format sections prescribe Chinese status labels and example outputs such as "进度播报" and "阻塞提醒". This is a natural-language policy issue because the skill mandates a specific language for user-facing communication without opt-in or a documented region-specific requirement.
The README explicitly describes automatic periodic Feishu status messages for long-running tasks, but it does not mention user consent, visibility, or privacy considerations for outbound updates. In a messaging integration, silently sending recurring updates can leak task metadata or create unexpected external communication, even if the content is only progress information.
No suspicious patterns detected.
