fde-mock-marketing-assets

Pass

Audited by Gen Agent Trust Hub on Jul 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The Python scripts (preflight.py and create_feishu_resources.py) execute local commands using subprocess.run. This is used to resolve the system's PATH variable via a shell environment and to interact with the lark-cli utility for creating resources on Feishu. These operations are restricted to the intended functionality of the skill and do not involve untrusted user input.
  • [EXTERNAL_DOWNLOADS]: The skill instructions and preflight script identify the need for the @larksuite/cli Node.js package. It provides the official installation command (npx @larksuite/cli@latest install) for the user to execute. This is a reference to a well-known service's official tooling and is considered safe practice for environment setup.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 26, 2026, 01:50 PM
Security Audit — agent-trust-hub — fde-mock-marketing-assets