feishu-cli-storage

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill operates by executing subcommands of feishu-cli to interact with Feishu Cloud services. This includes managing files, knowledge bases (Wiki), and document permissions.
  • [EXTERNAL_DOWNLOADS]: The instructions reference the feishu-cli tool available on GitHub (github.com/riba2534/feishu-cli) for installation and use. The tool is developed by the same author as the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill enables the agent to fetch and process external data from Feishu documents and wikis (e.g., via wiki export or drive search). This data is ingested into the agent's context, which is a potential surface for indirect prompt injection.
  • Ingestion points: Data is pulled from Feishu Cloud via feishu-cli commands in references/workflows/wiki/workflow.md and references/workflows/drive/workflow.md.
  • Boundary markers: The skill does not define specific delimiters for external content in its instruction files.
  • Capability inventory: The skill has permission to execute feishu-cli commands and perform local file Read/Write operations.
  • Sanitization: There is no explicit sanitization logic for external content described in the skill's markdown instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 02:36 PM