feishu-cli-platform

Warn

Audited by Socket on Aug 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS:功能边界本身较清晰,且未见直接恶意外传指令;主要问题是把登录与 Token 管理委托给来源未在 Skill 内明确绑定的 `feishu-cli` 外部二进制。结合外部证据中官方/第三方同名 CLI 混杂及第三方 raw 安装链,此 Skill 的供应链与凭证转发风险偏高。

Confidence: 84%Severity: 76%
Audit Metadata
Analyzed At
Aug 20, 2026, 07:40 PM
Package URL
pkg:socket/skills-sh/riba2534%2Ffeishu-cli%2Ffeishu-cli-platform%2F@3acf977d84aa1566c7f39c1c72546b49857b721e0abf4cf82e8699f1ba70b078
Security Audit — socket — feishu-cli-platform