fde-mock-marketing-assets
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The Python scripts (
preflight.pyandcreate_feishu_resources.py) execute local commands usingsubprocess.run. This is used to resolve the system'sPATHvariable via a shell environment and to interact with thelark-cliutility for creating resources on Feishu. These operations are restricted to the intended functionality of the skill and do not involve untrusted user input. - [EXTERNAL_DOWNLOADS]: The skill instructions and preflight script identify the need for the
@larksuite/cliNode.js package. It provides the official installation command (npx @larksuite/cli@latest install) for the user to execute. This is a reference to a well-known service's official tooling and is considered safe practice for environment setup.
Audit Metadata