feishu-attendance
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The analysis is limited to the SKILL.md documentation file. The referenced script
index.jsis not present in the provided content. - [INDIRECT_PROMPT_INJECTION]: The described functionality involves processing external data (Feishu attendance records). This represents a potential indirect injection surface if the data contains untrusted content, though no specific vulnerabilities are observable without the source code.
- Ingestion points: Feishu API (Attendance records)
- Boundary markers: None identified in documentation
- Capability inventory: Referenced reporting and notification via CLI
- Sanitization: Not addressed in documentation
Audit Metadata