feishu-cli-messaging

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Python subprocess module in fetch_chat_history.py and style_assets.py to invoke the feishu-cli binary. These calls are necessary for the skill's primary functionality—interacting with the Feishu API—and are restricted to localized or system-path binaries.
  • [SAFE]: The skill follows secure development practices. It uses environment variables for credential management rather than hardcoding secrets. It includes a dedicated linter (lint_card.py) to prevent the accidental inclusion of placeholder data or invalid structures in messages.
  • [SAFE]: All external references, such as the feishu-cli repository and VChart documentation, point to the author's own tools or established, well-known service domains. No data exfiltration or suspicious network activity was detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 31, 2026, 11:15 AM
Security Audit — agent-trust-hub — feishu-cli-messaging