feishu-perm
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill retrieves and displays collaborator information from the Feishu API, which serves as an ingestion point for untrusted data that could influence the agent's behavior if malicious instructions are embedded in names or IDs.
- Ingestion points: Responses from
client.im.drive.v1.permission.member.listinindex.js. - Boundary markers: None are present in the console output to delimit the API data from instructions.
- Capability inventory: Permission management (create, delete, update) for Feishu Drive files and folders.
- Sanitization: No data validation or escaping is performed on retrieved API content before it is printed to the console.
- [EXTERNAL_DOWNLOADS]: The
index.jsfile utilizes theminimistpackage for argument parsing, but this dependency is not declared in thepackage.jsonfile.
Audit Metadata