ClawHub
Back to skill

Security audit

飞书群聊机器人

Security checks for vulnerabilities and agentic risk

Overview

The skill is a coherent Feishu group-chat automation helper, but it can send, schedule, and broadcast messages to groups without clearly documented confirmation, recipient scoping, or cancellation controls.

Review this skill carefully before installing. It appears purpose-built for Feishu group automation, but only use it where the bot is authorized, recipients are explicit, message content is reviewed before sending, and scheduled or conditional automations can be disabled or audited.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
92% confidence
Finding

The trigger description contains broad phrases such as general Feishu messaging and automation terms that could match common user requests beyond the bot’s intended scope. This can cause unintended activation, leading the agent to send messages or automate group communications in contexts the user did not explicitly intend, which is especially risky because the skill can affect external communications and multiple recipients.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium
Category
Not specified by scanner
Confidence
91% confidence
Finding

The skill describes capabilities to send automated messages, reminders, approvals, and broadcasts to group chats without warning users about the risks of messaging the wrong audience, spamming groups, exposing sensitive content, or triggering unauthorized communications. Because the skill directly affects communication integrity and may process group/member data, missing warnings and safety constraints increase the chance of harmful or privacy-impacting misuse.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
92% confidence
Finding

This file contains natural-language content that implicitly forces a specific language/locale without opt-in. Under the policy, language constraints should either be optional for users or clearly justified as region-specific.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.