agency-feishu-integration-developer

Pass

Audited by Gen Agent Trust Hub on Mar 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill provides secure implementation patterns for enterprise integrations, specifically emphasizing that sensitive credentials such as app_secret and encrypt_key must never be hardcoded and should instead be managed via environment variables.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes official and well-known libraries from trusted sources, specifically the @larksuiteoapi/node-sdk (the official Feishu/Lark SDK) and express for webhook handling.
  • [SAFE]: The OAuth 2.0 authorization code flow implementation includes mandatory state parameter verification, which is a standard security measure to protect against Cross-Site Request Forgery (CSRF) attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 25, 2026, 06:19 AM