扫描报告
5 /100
feishu-group-helper
飞书群管理 skill - 维护群信息、处理群事件、发送群消息
Feishu group management skill with straightforward filesystem operations for storing group data in JSON format; no malicious behavior detected.
可以安装
This skill is safe to use. No security concerns identified.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ_WRITE | READ_WRITE | ✓ 一致 | fs.readFileSync/writeFileSync for feishu-groups.json |
| 网络访问 | NONE | NONE | — | N/A - Network calls handled by OpenClaw feishu integration |
| 命令执行 | NONE | NONE | — | No subprocess or shell execution |
| 环境变量 | NONE | NONE | — | No process.env access for sensitive data |
| 技能调用 | NONE | NONE | — | No recursive skill invocation |
| 剪贴板 | NONE | NONE | — | No clipboard access |
| 浏览器 | NONE | NONE | — | No browser automation |
| 数据库 | NONE | NONE | — | No database access |
1 项发现
中危 外部 URL 外部 URL
https://open.feishu.cn/ SKILL.md:119 目录结构
2 文件 · 12.7 KB · 488 行 JavaScript 1f · 301L
Markdown 1f · 187L
├─
▾
scripts
│ └─
groupManager.js
JavaScript
└─
SKILL.md
Markdown
安全亮点
✓ Clean codebase with no obfuscation or suspicious patterns
✓ Documentation accurately describes all functionality
✓ No credential harvesting or sensitive file access
✓ No network calls or data exfiltration attempts
✓ Filesystem operations are limited to a single JSON data file
✓ No external dependencies with unpinned versions
✓ Straightforward group management logic without hidden functionality