feishu-cli-platform
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of various shell commands through the
feishu-clibinary, including tools likejq,curl, andpython3for processing Feishu API data. The execution environment is scoped to specific platform capabilities such as authentication, searching, and directory queries. - [DATA_EXFILTRATION]: The skill handles sensitive authentication tokens (User Access Tokens and Tenant Access Tokens) stored in
~/.feishu-cli/token.json. It provides explicit instructions to prevent the exposure of these secrets in user-facing output or command history and includes mechanisms for secure token management and refresh. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data retrieved from Feishu APIs, such as search results from documents and messages. This represents a potential surface for indirect prompt injection where malicious content embedded in documents or messages could influence agent behavior. The skill mitigates this by requiring structured output and providing clear workflows, but relies on the agent's underlying safety guardrails for data sanitization.
Audit Metadata