feishu-cli-storage
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill operates by executing subcommands of
feishu-clito interact with Feishu Cloud services. This includes managing files, knowledge bases (Wiki), and document permissions. - [EXTERNAL_DOWNLOADS]: The instructions reference the
feishu-clitool available on GitHub (github.com/riba2534/feishu-cli) for installation and use. The tool is developed by the same author as the skill. - [INDIRECT_PROMPT_INJECTION]: The skill enables the agent to fetch and process external data from Feishu documents and wikis (e.g., via
wiki exportordrive search). This data is ingested into the agent's context, which is a potential surface for indirect prompt injection. - Ingestion points: Data is pulled from Feishu Cloud via
feishu-clicommands inreferences/workflows/wiki/workflow.mdandreferences/workflows/drive/workflow.md. - Boundary markers: The skill does not define specific delimiters for external content in its instruction files.
- Capability inventory: The skill has permission to execute
feishu-clicommands and perform local file Read/Write operations. - Sanitization: There is no explicit sanitization logic for external content described in the skill's markdown instructions.
Audit Metadata