feishu-cli-chat

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes examples that pass User/App tokens directly on the command line (e.g., --user-access-token <token>) and tells the agent to embed tokens into commands, which is a high-risk pattern requiring the LLM to handle or output secret values verbatim.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly instructs the agent to fetch and read user-generated Feishu chat content (e.g., via "feishu-cli msg history", "msg get", and "search messages" and the "完整示例：获取并总结群聊最近 N 条消息" flow), which ingests arbitrary third‑party/user messages that the agent will parse and act on—exposing it to indirect prompt-injection risk.