lark-doc
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on external binaries
lark-cliandwhiteboard-clito perform all document operations, including searching, fetching, creating, and updating content, as well as media orchestration. - [EXTERNAL_DOWNLOADS]: The skill facilitates downloading media (images, files, and whiteboard thumbnails) from Lark's infrastructure via
+media-download. It also allows the agent to provide external URLs in+createor+updatecommands, which causes the Lark platform to fetch content from those remote sources. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Lark documents and Wiki nodes, which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Document content, Wiki node information, and search results are retrieved via
lark-cli docs +fetchandlark-cli docs +searchas documented inreferences/lark-doc-fetch.mdandreferences/lark-doc-search.md. - Boundary markers: There are no specified delimiters or "ignore" instructions defined for separating fetched document content from the agent's instructions.
- Capability inventory: The skill possesses extensive capabilities including network operations (Lark API calls), document modification (append, overwrite, delete), and privilege management (granting user access via bot identity).
- Sanitization: The documentation does not describe any sanitization or filtering of document content before it is presented to the agent's context.
Audit Metadata