lark-note
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the execution of
lark-clito fetch meeting details and transcripts. It passes parameters such asnote_idanddoc_tokendirectly to CLI commands. - [PROMPT_INJECTION]: The skill exhibits vulnerability to indirect prompt injection due to its processing of untrusted data.
- Ingestion points: The skill ingests
note_id,note_doc_token, andverbatim_doc_tokenwhich may originate from external documents or user-provided content. - Boundary markers: Absent. There are no delimiters or instructions to ignore potential commands embedded within the data retrieved from the Lark platform.
- Capability inventory: The skill utilizes
lark-clifor network-based queries and writes output to the local filesystem (e.g.,./notes/{note_id}/unified_transcript.md). - Sanitization: No explicit sanitization, validation, or escaping of the ingested meeting data is performed before it is processed or written to disk.
Audit Metadata