feishu-cli-apps
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Utilizes the
feishu-cliutility to manage Feishu applications, including creating app entries and configuring access scopes such as specific users, organization-wide visibility, or public internet access. - [DATA_EXFILTRATION]: Provides instructions for uploading local files and directories to Feishu servers for hosting. The process includes a security mechanism that identifies and blocks the upload of sensitive configuration files like
.env,.aws/credentials, and.kube/configby default. - [EXTERNAL_DOWNLOADS]: References the author's public GitHub repository (
github.com/riba2534/feishu-cli) for installation of the required CLI tool, which is documented as a prerequisite for the skill's functionality.
Audit Metadata