agency-feishu-integration-developer
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides best-practice instructions for Feishu platform integration, including secure token management (using environment variables and caching), signature verification for webhooks, and the principle of least privilege for API permissions.
- [SAFE]: Code examples demonstrate standard use of official SDKs (@larksuiteoapi/node-sdk) and secure OAuth 2.0 flows.
- [SAFE]: Explicit warnings are provided against hardcoding secrets like 'app_secret' and 'encrypt_key', recommending the use of environment variables or secrets management services.
- [SAFE]: The skill includes defensive programming practices such as rate-limit handling, idempotency for event processing, and graceful degradation.
Audit Metadata