feishu-doc-to-wechat-draft
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using
subprocess.runto interact withlark-clifor fetching document data andffmpegfor video processing. - Evidence:
scripts/wechat_draft_publisher/lark_docs.pyandscripts/wechat_draft_publisher/wechat_api.pycalllark-cliandffmpegwith arguments derived from input parameters. - [EXTERNAL_DOWNLOADS]: The skill downloads content from external sources, including Feishu documents, images, and video assets.
- Evidence:
scripts/wechat_draft_publisher/wechat_api.pyusesurllib.request.urlopento communicate withapi.weixin.qq.comandopen.feishu.cn. - Evidence:
scripts/wechat_draft_publisher/pipeline.pydownloads remote images for article covers. - [PROMPT_INJECTION]: The skill processes untrusted content from Feishu documents which could potentially contain malicious instructions (indirect prompt injection) meant to influence an agent reading the rendered output.
- Ingestion points:
scripts/wechat_draft_publisher/lark_docs.py(vialark-clioutput). - Boundary markers: Absent. Content is processed and rendered into HTML without explicit delimiters for the agent context.
- Capability inventory: Shell command execution via
lark-cliandffmpegacross multiple scripts, network requests to WeChat/Feishu APIs, and local file writing for previews and caching. - Sanitization: Employs HTML escaping and regex-based normalization for specific Markdown elements.
Audit Metadata