feishu-wiki-orchestrator
Warn
Audited by Socket on Apr 18, 2026
1 alert found:
AnomalyAnomalyoutput/doc_with_permission.json
LOWAnomalyLOW
output/doc_with_permission.json
The code fragment exposes sensitive identifiers (node_token, collaborator_id) and elevated permission flags in clear text. There is no active malicious behavior, but the risk is sufficient to warrant redaction and strict access controls to prevent credential leakage or abuse in logs or transmitted data. Recommended controls: redact or mask node_token and collaborator_id in all logs and user interfaces; enforce least-privilege on permission flags; rotate tokens regularly; store sensitive fields in protected, access-controlled secrets storage; validate and sanitize payloads before rendering or transmitting.
Confidence: 68%Severity: 60%
Audit Metadata