Security audit
Security checks for vulnerabilities and agentic risk
This skill needs Review because it is advertised as an AI decision workbench but includes under-disclosed code that reads local Feishu credentials and can send messages to external services, including a hardcoded fallback recipient.
Install only in a sandbox or after source review. Do not run the installer or notification modules in an environment containing Feishu credentials unless you intend this skill to read those secrets and potentially send messages externally. Before normal use, remove automatic credential discovery, remove the hardcoded recipient fallback, require explicit notification configuration, and document all Feishu/Telegram/DingTalk/EvoMap data flows.
}
try:
resp = requests.post(url, json=payload, timeout=10)
data = resp.json()
if data.get('code') == 0:params = {"receive_id_type": "user_id"}
try:
resp = requests.post(url, headers=headers, json=payload, params=params, timeout=10)
data = resp.json()
if data.get('code') == 0:params = {"receive_id_type": "user_id"}
try:
resp = requests.post(url, headers=headers, json=payload, params=params, timeout=10)
data = resp.json()
if data.get('code') == 0:}
try:
resp = requests.post(url, json=payload, timeout=10)
data = resp.json()
if data.get('errcode') == 0:No suspicious patterns detected.