feishu-cli-board

Warn

Audited by Socket on May 15, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: 技能目的与画板编辑功能总体一致,但其核心依赖是个人 GitHub 发布的第三方 feishu-cli,并要求该工具持有和使用飞书 App Secret,再执行广泛的远端读写/删除/克隆操作。能力本身与用途匹配,但安装信任和凭证转交不成比例,整体应按高风险第三方集成看待。

Confidence: 89%Severity: 83%
Audit Metadata
Analyzed At
May 15, 2026, 07:25 AM
Package URL
pkg:socket/skills-sh/riba2534%2Ffeishu-cli%2Ffeishu-cli-board%2F@53f71f96eaee95075acdd8e4b81bcb164c3e8eb8