feishu-cli-storage

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s stated purpose is coherent with storage/wiki/comment/permission management, but its trust boundary is weak because it grants broad shell execution to a local `feishu-cli` binary whose provenance is not proven here and whose name does not cleanly match the official upstream `lark-cli`. There is no direct evidence of malware or exfiltration in the snippet, but the combination of broad command execution plus high-impact cloud actions makes this a medium-risk skill that should only be used if the CLI binary is verified as the official same-org tool.

Confidence: 83%Severity: 57%
Audit Metadata
Analyzed At
Sep 23, 2026, 02:37 PM
Package URL
pkg:socket/skills-sh/riba2534%2Ffeishu-cli%2Ffeishu-cli-storage%2F@0da55a6cd1087c7f53fd2905aa829d66886c05a937fba8e1100e0151c80f7cff