lark
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation refers to the installation of the
@larksuite/clipackage from the official NPM registry. This is the legitimate CLI tool for Lark/Feishu, a well-known enterprise collaboration platform. - [COMMAND_EXECUTION]: The provided maintenance script (
scripts/sync-lark.sh) is used to keep the skill's routing table updated. It performs standard administrative tasks such as updating version metadata inSYNC.mdviased, cleaning up obsolete directories within the skill folder usingfindandrm, and executing a local Python tool to regenerate the index. - [DYNAMIC_EXECUTION]: The skill implements a dynamic routing architecture. Instead of hardcoding all instructions, it directs the agent to query the
lark-clibinary (lark-cli skills read <sub-skill>) at runtime. This allows the agent to access the most current instruction sets and command schemas directly from the official toolchain.
Audit Metadata