The Agent Skills Directory

[SAFE]: No malicious patterns or security risks were identified during the analysis of the skill's instructions or supporting scripts.
[COMMAND_EXECUTION]: The script scripts/lark_sheet_read_cli.py uses subprocess.run to communicate with the lark-cli binary. Commands are executed by passing arguments as a list without a shell environment, which effectively prevents command injection attacks from malicious spreadsheet content.
[INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface for untrusted data from spreadsheets. However, the provided guidelines and scripts like lark_profile_table.py include extensive safeguards, such as sample verification and data type profiling, to mitigate the risk of processing malicious instructions embedded in spreadsheet cells.
[EXTERNAL_DOWNLOADS]: References are made to official larksuite GitHub resources. As a well-known service provider, these references are considered safe and are documented neutrally.

lark-sheets