feishu-notify
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto send HTTP POST requests for notifications andcatto read its configuration file at~/.claude/feishu.json. - [EXTERNAL_DOWNLOADS]: Communicates with remote Feishu API endpoints and user-configured bridge servers to deliver messages and poll for responses.
- [PROMPT_INJECTION]: An indirect prompt injection surface is present in the interactive mode workflow. 1. Ingestion points: Remote user input is retrieved via the
pollendpoint of the$BRIDGE_URLspecified in SKILL.md. 2. Boundary markers: No delimiters or instructions to ignore embedded commands are used when processing the polled data. 3. Capability inventory: The skill usescurlandcatand facilitates data transfer between remote endpoints and other agent skills. 4. Sanitization: The skill does not perform validation or sanitization on the data received from the external bridge before returning it to the agent context.
Audit Metadata