soia-cwork-feishu-cli
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the official Feishu CLI tool from the
@larksuite/clipackage on npm usingnpx. - [COMMAND_EXECUTION]: The skill includes a Python script
scripts/setup_app_credentials.pythat executes shell commands via thesubprocessmodule to manage application profiles and credentials. The script correctly passes sensitive information like the App Secret via standard input rather than command-line arguments to prevent exposure. - [COMMAND_EXECUTION]: The skill instructions direct the agent to execute various
lark-clicommands for auditing, searching, and reading Feishu Wiki and Drive content.
Audit Metadata