lark-cli
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the official
@larksuite/clipackage from the npm registry usingnpx. This is a standard procedure for installing official developer tools and originates from a well-known service. - [COMMAND_EXECUTION]: The skill executes
lark-clicommands andnpm/npxto manage the lifecycle of the Lark developer environment. These operations are limited to the intended scope of the skill and include safety measures like--dry-runsupport. - [DATA_EXFILTRATION]: There are no indicators of unauthorized data collection. The skill manages OAuth authentication URLs and setup tokens which are intended to be presented to the user for manual intervention in a browser.
Audit Metadata