feishu-cli-read

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md explicitly instructs the agent to fetch and export user-authored Feishu cloud documents and wiki pages (via document IDs, node tokens, or https://xxx.feishu.cn/docx/ and /wiki/) and then read/interpret the exported Markdown and images as part of its analysis, which exposes it to untrusted, user-generated third-party content.