feishu-wiki

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides Python scripts to interact with the Feishu API for tasks like listing wiki nodes, saving documents, and reading Bitable records. These scripts are intended to be executed by the agent to perform its core functions.
  • [EXTERNAL_DOWNLOADS]: The scripts communicate with the official Feishu Open API (https://open.feishu.cn/open-apis) to perform data operations. This is the expected and documented behavior for a Feishu integration tool.
  • [CREDENTIALS_SAFE]: While the code contains variables for APP_ID and APP_SECRET, the secret values are either set to a placeholder like REMOVED_FEISHU_SECRET or read from environment variables (FEISHU_APP_SECRET). This follows best practices for secret management in AI skills.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 09:03 AM
Security Audit — agent-trust-hub — feishu-wiki