feishu-notify

The notification behavior is consistent with the stated purpose, but direct interpolation of the webhook URL and configuration path into Python source creates code-injection risks. Treat configuration input and the `HOME` environment as trusted only; safer handling would pass values through arguments or environment variables and avoid constructing executable source from them. No clear evidence of intentional malware is present.