feishu-cron-reminder

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is purpose-aligned for Feishu reminders and does not show clear credential theft or unrelated exfiltration, but it enables autonomous recurring outbound messaging and uses forceful system-event instructions to control the main session. The trust story is weakened slightly by the unverified `AutoClaw.app` path reference and reliance on the OpenClaw CLI ecosystem, though not enough to make it malicious.

Confidence: 86%Severity: 68%
Audit Metadata
Analyzed At
Sep 15, 2026, 06:24 AM
Package URL
pkg:socket/skills-sh/zrt-ai-lab%2Fopencode-skills%2Ffeishu-cron-reminder%2F@ff23d06b6c48e96f47f8a4b62ea8973a0f0b47e52db9ccf3cb5c9747b2375778
Security Audit — socket — feishu-cron-reminder