feishu-im
Warn
Audited by Socket on Sep 27, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill’s stated purpose matches Feishu messaging and group management, and its network endpoint is the official Feishu API. However, it depends on an unprovided local token-minting shell script that receives app credentials and writes a local token cache; this makes the credential path unverifiable and raises risk despite otherwise coherent purpose and data flow.
Confidence: 89%Severity: 82%
Audit Metadata