feishu-im

Warn

Audited by Socket on Sep 27, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill’s stated purpose matches Feishu messaging and group management, and its network endpoint is the official Feishu API. However, it depends on an unprovided local token-minting shell script that receives app credentials and writes a local token cache; this makes the credential path unverifiable and raises risk despite otherwise coherent purpose and data flow.

Confidence: 89%Severity: 82%
Audit Metadata
Analyzed At
Sep 27, 2026, 12:36 AM
Package URL
pkg:socket/skills-sh/alextangson%2Ffeishu_skills%2Ffeishu-im%2F@fc7848588c440228cb725af55919c9014242e3c805ddd97305370d538777cef2