feishu-cli-messaging
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Python
subprocessmodule infetch_chat_history.pyandstyle_assets.pyto invoke thefeishu-clibinary. These calls are necessary for the skill's primary functionality—interacting with the Feishu API—and are restricted to localized or system-path binaries. - [SAFE]: The skill follows secure development practices. It uses environment variables for credential management rather than hardcoding secrets. It includes a dedicated linter (
lint_card.py) to prevent the accidental inclusion of placeholder data or invalid structures in messages. - [SAFE]: All external references, such as the
feishu-clirepository and VChart documentation, point to the author's own tools or established, well-known service domains. No data exfiltration or suspicious network activity was detected.
Audit Metadata