soia-cwork-feishu-cli

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the official Feishu CLI tool from the @larksuite/cli package on npm using npx.
  • [COMMAND_EXECUTION]: The skill includes a Python script scripts/setup_app_credentials.py that executes shell commands via the subprocess module to manage application profiles and credentials. The script correctly passes sensitive information like the App Secret via standard input rather than command-line arguments to prevent exposure.
  • [COMMAND_EXECUTION]: The skill instructions direct the agent to execute various lark-cli commands for auditing, searching, and reading Feishu Wiki and Drive content.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 09:25 AM
Security Audit — agent-trust-hub — soia-cwork-feishu-cli