feishu-cli-data

Warn

Audited by Socket on Jul 31, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s purpose and Feishu data-management capabilities are internally coherent, and official same-org evidence exists for the Feishu CLI. The main risk is disproportionate execution trust: it permits wildcard Bash against a local ./feishu-cli binary whose provenance is not verifiable from the skill, creating a supply-chain and credential-forwarding concern even though no direct exfiltration or overtly malicious behavior is shown.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
Jul 31, 2026, 11:16 AM
Package URL
pkg:socket/skills-sh/riba2534%2Ffeishu-cli%2Ffeishu-cli-data%2F@a69d62009b59b14e997399a3401a403c1f73a907e44bac080ce80fc1ae823eaa
Security Audit — socket — feishu-cli-data