feishu-cli-card
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface. * Ingestion points: User-provided scene descriptions are ingested via argument hints in SKILL.md. * Boundary markers: There are no instructions providing delimiters or warnings to ignore embedded instructions in the user data. * Capability inventory: The skill uses Bash to execute feishu-cli and Write to save JSON files in /tmp/. * Sanitization: No sanitization or escaping of external content is defined before interpolation into the templates.
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute feishu-cli and python for card transmission and JSON validation, which is consistent with its stated purpose.
Audit Metadata