Security audit
Feishu File Send
Security checks for vulnerabilities and agentic risk
Overview
This is a markdown-only Feishu attachment workflow helper whose instructions match its stated purpose.
Install this if you want guidance for reliably sending Feishu attachments. Use it only with files you intend to share, and be cautious before adding broad directories like /tmp to mediaLocalRoots because that expands which local files the messaging system may send.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.