feishu-im-read

Warn

Audited by Socket on Apr 1, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The core Feishu/Lark messaging functionality is plausible, but the skill's actual scope is broader than its read-focused name and description: it can send messages and upload files. No clear malicious exfiltration or untrusted installer is shown, yet the purpose-capability mismatch and action-taking features make the skill higher risk than a simple history reader.

Confidence: 84%Severity: 57%
Audit Metadata
Analyzed At
Apr 1, 2026, 02:55 PM
Package URL
pkg:socket/skills-sh/cklxx%2Felephant.ai%2Ffeishu-im-read%2F@9a8560565745e6f47ae6b47937609212d589d1e8