安全决策报告
feishu-log
Skill contains hardcoded Feishu API credentials in multiple files and an undeclared credential collection tool, creating significant credential exposure risk despite no confirmed exfiltration behavior.
最直接的威胁证据
01
Skill presents as legitimate Feishu log recording tool through SKILL.md 初始入口 · SKILL.md
02
Attacker gains access to source code repository containing hardcoded credentials 权限提升 · log-simple.mjs
03
Attacker extracts hardcoded Feishu App ID and App Secret 权限提升 · log-simple.mjs
为什么得出这个结论
2/4 个维度触发 阻止
声明与实际能力
发现 3 项声明之外的能力或越权行为。
复核
隐藏执行与外联
提取到 18 个一般风险产物，需要结合上下文判断。
阻止
攻击链与高危发现
报告包含 4 步攻击链，另有 3 项高危或严重发现。
复核
依赖与供应链卫生
发现 1 项需要关注的依赖或供应链线索。
攻击链
01
Skill presents as legitimate Feishu log recording tool through SKILL.md
初始入口 · SKILL.md:1
02
Attacker gains access to source code repository containing hardcoded credentials
权限提升 · log-simple.mjs:13
03
Attacker extracts hardcoded Feishu App ID and App Secret
权限提升 · log-simple.mjs:13
04
Attacker uses stolen credentials to access victim's Feishu workspace, create/modify documents, and manage folders
最终危害 · feishu-log.js:1
风险分是怎么被拉高的
Hardcoded API credentials in source code +25
Multiple files contain real Feishu App ID and App Secret: cli_a93b936aa9391cc7 and aMRJMyi3KSXbSJhRgyx7ycvyT5D3rsrs
Undeclared credential collection tool +20
config-credentials.js is flagged sensitive but not documented in SKILL.md; it collects and saves credentials to ~/.openclaw/feishu-credentials.json
Documentation mismatch +15
SKILL.md claims .env-only config but log-work.mjs reads from ~/.openclaw/openclaw.json without disclosure
Multiple credential fallback sources +5
Scripts use env vars > OpenClaw config > hardcoded defaults chain
最关键的证据
高危 凭证窃取
Hardcoded Feishu API Credentials in Source Code
Multiple JavaScript files contain hardcoded Feishu App ID (cli_a93b936aa9391cc7) and App Secret (aMRJMyi3KSXbSJhRgyx7ycvyT5D3rsrs) as fallback values. These credentials appear in: log-simple.mjs:13-14, log-work.mjs:32-36, log.js:19-21, log-interactive.mjs:6-8, config-credentials.js:51-53. Exposing API credentials in source code is a critical security risk.
log-simple.mjs:13 Remove all hardcoded credentials. Use only environment variables or secure credential management.
高危 文档欺骗
Undeclared Credential Collection Tool
config-credentials.js is marked as sensitive but is not mentioned in SKILL.md. This interactive tool collects Feishu credentials from users and saves them to ~/.openclaw/feishu-credentials.json. This hidden functionality is undisclosed.
config-credentials.js:1 Document this tool in SKILL.md or remove it if not needed.
高危 文档欺骗
Undeclared OpenClaw Config Credential Source
log-work.mjs reads Feishu credentials from ~/.openclaw/openclaw.json (lines 14-32) as a fallback source. SKILL.md only mentions .env file configuration, creating a documentation mismatch.
log-work.mjs:14 Document all credential sources in SKILL.md.
中危 凭证窃取
Hardcoded Folder Token in Source
log.js and log-interactive.mjs contain hardcoded ROOT_FOLDER_TOKEN (RdVIffbJxl8HDCdJiULcIpdgnzf) as fallback.
log.js:21 Remove hardcoded folder tokens.
中危 敏感访问
Sensitive File Access Not Documented
Skill accesses multiple sensitive paths: ~/.openclaw/workspace/.env, ~/.openclaw/feishu-credentials.json, ~/.openclaw/openclaw.json. SKILL.md does not declare filesystem access to these paths.
feishu-log.js:53 Document all sensitive path accesses in SKILL.md.
低危 凭证窃取
config-credentials.js Has Default Credential Fallback
If user provides empty input during credential collection, config-credentials.js uses hardcoded defaults.
config-credentials.js:51 Remove default credential fallbacks in interactive prompts.
声明能力 vs 实际能力
文件系统 阻止
声明 READ
→ 推断 WRITE
feishu-log.js:53 writes to ENV_FILE_PATH 网络访问 阻止
声明 READ
→ 推断 WRITE
All scripts make HTTPS POST requests to Feishu API 环境变量 阻止
声明 NONE
→ 推断 READ
feishu-log.js:57 reads os.homedir(); log-work.mjs:26 reads process.env 可疑产物与外联
中危 外部 URL
https://feishu.cn/drive README-权限设置.md:14
中危 外部 URL
https://feishu.cn/drive/folder/[文件夹 README-权限设置.md:37
中危 外部 URL
https://feishu.cn/drive/folder/MDjAfBJorlqu14dWxBocy7MnnId README-权限设置.md:41
中危 外部 URL
https://open.feishu.cn/document README-权限设置.md:79
中危 外部 URL
https://open.feishu.cn/app/YOUR_APP_ID/auth?q=drive:drive SKILL.md:141
中危 外部 URL
https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal/ SKILL.md:193
中危 外部 URL
https://open.feishu.cn/open-apis/contact/v3/users?user_id_type=open_id&page_size=10 SKILL.md:197
中危 外部 URL
https://feishu.cn/docx/doxxx SKILL.md:228
中危 外部 URL
https://open.feishu.cn/open-apis/drive/v1/permissions/:token/members SKILL.md:343
中危 外部 URL
https://open.feishu.cn/ config-credentials.js:51
中危 外部 URL
https://open.feishu.cn/open-apis feishu-log.js:25
中危 外部 URL
https://feishu.cn/docx/$ feishu-log.js:305
依赖与供应链
| 包名 | 版本 | 来源 | 漏洞 | 备注 |
|---|---|---|---|---|
| @larksuiteoapi/node-sdk | * | npm | 否 | Official Feishu SDK, version not pinned |
文件构成
15 个文件 · 3172 行
JavaScript 6 个文件 · 1752 行Markdown 7 个文件 · 1390 行Shell 1 个文件 · 25 行JSON 1 个文件 · 5 行
需关注文件 · 9
config-credentials.js Undeclared Credential Collection Tool · config-credentials.js Has Default Credential Fallback · https://open.feishu.cn/
feishu-log.js Sensitive File Access Not Documented · https://open.feishu.cn/open-apis · https://feishu.cn/docx/$
SKILL.md https://open.feishu.cn/app/YOUR_APP_ID/auth?q=drive:drive · https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal/ · https://open.feishu.cn/open-apis/contact/v3/users?user_id_type=open_id&page_size=10 · https://feishu.cn/docx/doxxx · https://open.feishu.cn/open-apis/drive/v1/permissions/:token/members
log-work.mjs Undeclared OpenClaw Config Credential Source
log-interactive.mjs https://wcnh9mbykuay.feishu.cn/docx/$
log-simple.mjs Hardcoded Feishu API Credentials in Source Code · https://bytedance.feishu.cn/docx/$
log.js Hardcoded Folder Token in Source
更新说明.md https://open.feishu.cn/document/ukTMukTMukTM/uEjNwUjLxYDM14SM2gTN · https://open.feishu.cn/document/ukTMukTMukTM/ucDM54SOy4DNL4SM2gTN · https://open.feishu.cn/document/ukTMukTMukTM/uYjNwUjL2YDM14iN2gTN
修复报告.md https://wcnh9mbykuay.feishu.cn/docx/Z463dNM4EoBOvOxNGIhcQEdbn0d
其他文件 · 技能规范检查.md · 规范符合性总结.md · README.md
安全亮点
No evidence of data exfiltration or C2 communication
No reverse shell or remote code execution detected
No base64 obfuscation or suspicious encoding patterns
No credential harvesting beyond the documented API use
Uses HTTPS for all network requests to official Feishu API endpoints
No evidence of supply chain attacks or malicious dependencies
Dependencies (@larksuiteoapi/node-sdk) appear legitimate