feishu-cli-toolkit

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute feishu-cli commands for managing various Feishu resources. It includes a shell script for batch-downloading attachments which parses exported markdown files and iterates through links using standard utilities like grep and sed.
  • [EXTERNAL_DOWNLOADS]: The skill references the author's official GitHub repository (github.com/riba2534/feishu-cli) for the installation of the required command-line tool. It also facilitates the legitimate downloading of cloud files, media assets, and document attachments from Feishu's infrastructure as part of its core functionality.
  • [DATA_EXFILTRATION]: While the skill handles sensitive data, including authentication tokens (stored in ~/.feishu-cli/token.json or provided via environment variables) and organizational content, all network operations are directed toward Feishu's official API endpoints. No unauthorized data transmission patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 07:22 PM