feishu-message-recall
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill implements standard security practices for secret management by retrieving 'FEISHU_APP_ID' and 'FEISHU_APP_SECRET' from environment variables ('os.getenv') rather than hardcoding values or storing them in plain text.
- [COMMAND_EXECUTION]: The skill uses a Python script to automate message deletion tasks, which is the primary intended functionality for Feishu workspace administration.
- [EXTERNAL_DOWNLOADS]: The script uses the 'requests' library to interact with official Feishu API endpoints at 'open.feishu.cn'. These network operations are directed at a well-known service and are necessary for the skill's operation.
Audit Metadata