feishu-cli-work

SUSPICIOUS: the stated purpose is coherent, but the trust model is weak. The skill routes sensitive workplace actions and user tokens through an external CLI with ambiguous provenance and also allows execution of a local `./feishu-cli`, which is disproportionate unless tightly controlled. No explicit malicious exfiltration is shown, but the install/execution trust and credential-forwarding risks are material.