lark-suite
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill specifies a requirement for the 'lark-cli' binary in its metadata. This tool is a vendor-owned resource associated with the Lark/飞书 suite and is necessary for the skill's documented functionality.
- [PROMPT_INJECTION]: The instructions provide specific operational constraints, such as directing the agent to use this skill instead of generic web fetching for Lark resources on 'doubao.com' and guiding the agent to read internal reference files directly. These represent functional routing logic rather than attempts to bypass security controls.
Audit Metadata