feishu-bot-dev
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches official SDKs and tools from public registries like npm and PyPI, including '@anthropic/opdev', '@larksuiteoapi/node-sdk', and 'lark-oapi'.
- [COMMAND_EXECUTION]: Provides a Python script ('scripts/feishu_api.py') that functions as a CLI tool for interacting with Feishu APIs, including messaging and document management.
- [SAFE]: Secure credential management is implemented by using environment variables (FEISHU_APP_ID, FEISHU_APP_SECRET) instead of hardcoding secrets.
- [SAFE]: All network communications are directed to official and well-known Feishu domains ('open.feishu.cn').
Audit Metadata