Scan Report
5 /100
feishu-group-helper
飞书群管理 skill - 维护群信息、处理群事件、发送群消息
Feishu group management skill with straightforward filesystem operations for storing group data in JSON format; no malicious behavior detected.
Safe to install
This skill is safe to use. No security concerns identified.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | READ_WRITE | READ_WRITE | ✓ Aligned | fs.readFileSync/writeFileSync for feishu-groups.json |
| Network | NONE | NONE | — | N/A - Network calls handled by OpenClaw feishu integration |
| Shell | NONE | NONE | — | No subprocess or shell execution |
| Environment | NONE | NONE | — | No process.env access for sensitive data |
| Skill Invoke | NONE | NONE | — | No recursive skill invocation |
| Clipboard | NONE | NONE | — | No clipboard access |
| Browser | NONE | NONE | — | No browser automation |
| Database | NONE | NONE | — | No database access |
1 findings
Medium External URL 外部 URL
https://open.feishu.cn/ SKILL.md:119 File Tree
2 files · 12.7 KB · 488 lines JavaScript 1f · 301L
Markdown 1f · 187L
├─
▾
scripts
│ └─
groupManager.js
JavaScript
└─
SKILL.md
Markdown
Security Positives
✓ Clean codebase with no obfuscation or suspicious patterns
✓ Documentation accurately describes all functionality
✓ No credential harvesting or sensitive file access
✓ No network calls or data exfiltration attempts
✓ Filesystem operations are limited to a single JSON data file
✓ No external dependencies with unpinned versions
✓ Straightforward group management logic without hidden functionality