feishu-cli-data

SUSPICIOUS. The skill's purpose and capabilities are internally consistent and well-scoped for Feishu sheet/Bitable operations, with no obvious hidden data routing. However, it depends on a non-official third-party CLI from a personal GitHub account, and the documented install path uses mutable curl|bash; because that external tool may receive Feishu credentials/tokens, the supply-chain risk is medium-high even without direct evidence of malicious behavior in the skill itself.