lark-vc
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides structured instructions for interacting with the Feishu/Lark environment through the
lark-clibinary. It includes numerous examples of shell commands for meeting search (vc +search), note retrieval (vc +notes), and recording management (vc +recording). - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external and untrusted meeting data, including transcripts, AI summaries, and shared documents, which presents a surface for indirect prompt injection.
- Ingestion points: External content is ingested via
lark-cli docs +fetchandlark-cli vc +notesas described inSKILL.mdandreferences/lark-vc-notes.md. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore potential commands embedded within the meeting content.
- Capability inventory: The skill uses tools with capabilities to read/write files (e.g.,
media-downloadfor whiteboard covers) and perform network API calls via the CLI tool. - Sanitization: There are no explicit sanitization or filtering steps mentioned for the retrieved meeting content before it is processed by the agent.
Audit Metadata