feishu-bitable-hardened
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill uses official Feishu API domains (open.feishu.cn) and standard libraries (node-fetch, dotenv) for all operations.
- [SAFE]: Instructional guardrails are included in SKILL.md to restrict the agent's behavior, explicitly preventing destructive operations (deleting or updating) and unauthorized API scope escalation (using credentials for non-Bitable Feishu APIs).
- [SAFE]: Hardcoded identifiers in the scripts (e.g., appToken in add_task.js) are non-sensitive table identifiers used for default configuration purposes.
- [COMMAND_EXECUTION]: The add_task_dynamic.js script processes command-line arguments (process.argv) to populate record fields. This creates a data ingestion surface where external input is sent to the Feishu API. While this is standard CLI behavior, it is noted as the primary ingestion point for user-supplied data.
- [SAFE]: The code references an authentication module via a relative path (../../skills/feishu-doc/lib/auth). This indicates a dependency on a shared library structure rather than a malicious execution or remote download vector.
Audit Metadata