feishu-cli-docs

Warn

Audited by Socket on Oct 12, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's document-management scope is coherent, but it depends on a non-official third-party CLI installed via raw GitHub pipe-to-shell and forwards user access tokens to that CLI. I found no clear malicious or off-purpose exfiltration behavior, but the install trust and credential-forwarding footprint are disproportionate enough to classify it as suspicious rather than benign.

Confidence: 88%Severity: 78%
Audit Metadata
Analyzed At
Oct 12, 2026, 09:46 AM
Package URL
pkg:socket/skills-sh/riba2534%2Ffeishu-cli%2Ffeishu-cli-docs%2F@51e4e58adb5b815bd0db6676f28341e46ad18296fc5a39eb278e521d0ce4a4ad