feishu-cli-meetings

SUSPICIOUS: the business purpose is coherent, but the skill’s trust model is weak because it relies on an ambiguously sourced external feishu-cli and forwards sensitive User/Bot tokens to it. No clear malicious exfiltration path is shown, yet the unpinned, non-officially mapped CLI makes this a high supply-chain and credential-forwarding risk.