feishu-lark-agent

SUSPICIOUS: The skill’s capabilities broadly match its Feishu/Lark automation purpose and data appears intended for official service endpoints, but the executable is an unverifiable local script and the run flow sources the entire shell profile for credentials. This is not confirmed malicious, yet it carries moderate risk due to opaque provenance plus the ability to take external actions on the user’s behalf.