Security audit
Feishu Docx PowerWrite
Security checks across malware telemetry and agentic risk
Overview
This is a straightforward Feishu/Lark Docx writing helper with disclosed document-editing behavior and no evidence of hidden execution or data theft.
Install this only if you want an agent to write to Feishu/Lark Docx documents using your own Feishu app credentials. Prefer append mode for existing documents, verify the document ID or link before writing, and treat replace mode as destructive because it overwrites the target document.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
63/63 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.