feishu-notify

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. Push-only mode is largely benign and aligned with the skill's purpose because it posts to official Feishu webhooks. Interactive mode materially increases risk by routing data and control through a third-party local bridge from a personal GitHub repo, making the overall skill only partially proportionate to its stated notification role.

Confidence: 87%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 02:08 PM
Package URL
pkg:socket/skills-sh/wanshuiyin%2Fauto-claude-code-research-in-sleep%2Ffeishu-notify%2F@be59bfa85adebd1506b66bc62b569ac193f3cefc88436147c5f5b9f6012891f9
Security Audit — socket — feishu-notify