lark-skill-maker
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the lark-cli tool and repositories under the 'larksuite' organization on GitHub. Lark (an enterprise collaboration platform by ByteDance) is a well-known technology service provider.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of new instruction sets by processing API documentation. While this is an ingestion surface, the skill implements safety guardrails such as 'dry-run' patterns, minimal read-only examples, and explicit permission/scope documentation requirements.
- [DYNAMIC_EXECUTION]: As a 'Skill Maker', its primary purpose is the generation of new SKILL.md instruction files. This behavior is transparent, template-driven, and aligned with its stated purpose.
Audit Metadata