feishu-send-file
Audited by Socket on Aug 19, 2026
1 alert found:
AnomalyThis module is a straightforward Feishu integration tool that can upload a user-specified local file and send it to a specified recipient using Feishu APIs. There is no evidence of obfuscation or covert execution, and network destinations are consistent with legitimate Feishu endpoints. However, it has high data-disclosure potential because it can exfiltrate arbitrary local file contents to a third-party messaging service when given a caller-controlled file_path, and it accepts app_secret via command-line arguments (often leaked via process inspection). Treat as sensitive and ensure strict input control and secret handling; malware intent is not clearly indicated, but the capability is high-impact.