lark-workflow-approval-accelerator
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
lark-clibinary to perform administrative and communication tasks within the Lark (Feishu) ecosystem. These operations (querying tasks, fetching instance details, searching contacts, and sending messages) are consistent with the skill's stated purpose of managing approval workflows. - [EXTERNAL_DOWNLOADS]: The skill references external documentation and shared configurations hosted on GitHub within the
larksuite/clirepository. These references are used for informational purposes and authentication context, and originate from a well-known organization, representing no significant security risk. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external API responses (e.g., approval titles and timelines). While this presents a potential attack surface for indirect prompt injection, the skill mitigates this risk by mandating a manual user confirmation step before executing the
im +messages-sendcommand to notify others.
Audit Metadata