Feishu Sheets Skill

• Analyzed: May 12, 2026, 4:09 AM
• Findings: 1
• Version: 1.0.0
• Hash: f37ed3bb1d703e0da5ab513dc44099d51ee8b9f564c182fc99093f32b4567232
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides a client for the Feishu Sheets API, enabling operations like creating, reading, writing, and managing spreadsheets. The `SKILL.md` file contains clear, functional instructions for the AI agent without any prompt injection attempts to subvert its behavior. The `scripts/feishu_sheets.py` script securely retrieves API credentials from environment variables and interacts with legitimate Feishu API endpoints. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or other harmful intent. The input handling via `sys.argv` and `json.loads` is standard for a CLI tool and does not introduce vulnerabilities on the host system.