feishu-cli-toolkit
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to executefeishu-clicommands for managing various Feishu resources. It includes a shell script for batch-downloading attachments which parses exported markdown files and iterates through links using standard utilities likegrepandsed. - [EXTERNAL_DOWNLOADS]: The skill references the author's official GitHub repository (
github.com/riba2534/feishu-cli) for the installation of the required command-line tool. It also facilitates the legitimate downloading of cloud files, media assets, and document attachments from Feishu's infrastructure as part of its core functionality. - [DATA_EXFILTRATION]: While the skill handles sensitive data, including authentication tokens (stored in
~/.feishu-cli/token.jsonor provided via environment variables) and organizational content, all network operations are directed toward Feishu's official API endpoints. No unauthorized data transmission patterns were detected.
Audit Metadata