Security audit
Feishu Multi Agent Chat
Security checks across malware telemetry and agentic risk
Overview
This is an instructional Feishu bot-collaboration skill with no executable code and its Feishu API use is disclosed and aligned with its purpose.
Install only if you intend to connect AI agents through Feishu. Protect the Feishu App Secret and open_id values, limit the bot to the intended group, keep broad group-message permissions disabled unless you knowingly need them, and remember that configured bots can post messages into the Feishu group.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.