The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Lark Base (Feishu), creating a surface for indirect prompt injection.
Ingestion points: Data enters the agent's context through various points, including record retrieval commands (+record-list, +record-search, +record-get), form detail inspection (+form-detail), and URL resolution (+url-resolve) as described in SKILL.md.
Boundary markers: There is an absence of explicit instructions in the SOPs (e.g., lark-base-record-query-and-analysis-sop.md) to use delimiters or strict sanitization routines when handling content from retrieved records or form submissions.
Capability inventory: The skill provides broad capabilities, including full CRUD access to Lark Base entities, advanced role management, and the ability to create workflows with HTTPClientAction (network access) as defined in lark-base-workflow-schema.md. It also instructs the agent to generate and run Python scripts locally to process data exports.
Sanitization: No specific sanitization or validation logic is defined for data interpolated into agent prompts or generated scripts.
[COMMAND_EXECUTION]: The skill uses the lark-cli tool to interact with the Lark ecosystem. It provides numerous templates and procedures for executing CLI commands to manage database resources, permissions, and automations as documented throughout the skill files.
[DYNAMIC_EXECUTION]: As seen in lark-base-data-analysis-python-stdlib.md and lark-base-data-analysis-pandas.md, the agent is instructed to write and execute Python scripts to perform complex data analysis on NDJSON files exported from the platform. While based on templates, this involves runtime code generation and execution on the host machine.
[EXTERNAL_DOWNLOADS]: The data analysis SOP (lark-base-record-query-and-analysis-sop.md) permits the dynamic installation of the pandas library via package managers like pip or uv if the dependency is not present. This constitutes an external download of executable code at runtime.

lark-base