Skills/ClawHub/feishu-doc-orchestrator

feishu-doc-orchestrator@1.0.3

CAUTION· static only

Publisher claims: "飞书文档创建技能 - 将Markdown文件转换为飞书文档，支持25种块类型，完整权限管理。当用户需要将Markdown文档转换为飞书文档、创建协作文档、批量处理文档内容时激活此技能。" Observed in sandbox: static analysis only — behavior not yet observed.

Registry ClawHubPublisher zhengyi0712 · publishing for 256 daysInstalls 1,043Last detonated 29 min ago
What would fix thisWatchDispute verdict

Coverage

Static only; nothing was run yet.

The label rests on the code, the instruction files and the publisher. The honeypot run replaces this verdict when it completes.

Is [email protected] safe to install?

KillerSkills analysed it statically (a sandbox run is pending) on 2026-11-15 and scored it 65/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Summary: static analysis only — behavior not yet observed.

Behavior trace

Queued for honeypot run · static analysis only
t+CategoryObserved action

This version has not been detonated yet. The score above counts behavior as unknown (50/100), so it cannot read Verified until the honeypot run completes and replaces this verdict.

Static findings

MEDIUM
File type combined with upload actionoriginal-skill/feishu-doc-verifier/SKILL.md:64 · File type combined with upload action — agent may exfiltrate local data filespython scripts/doc_verifier.py workflow/step2_create/doc_info.json outputFix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Python subprocess execution detectedoriginal-skill/feishu-doc-creator-with-permission/scripts/doc_creator_with_permission.py:70 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedoriginal-skill/feishu-doc-orchestrator/scripts/orchestrator.py:36 · Python subprocess execution detectedresult = subprocess.run(cmd, capture_output=True, text=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File type combined with upload actionoriginal-skill/feishu-block-adder/scripts/block_adder.py:314 · File type combined with upload action — agent may exfiltrate local data filesprint("Usage: python block_adder.py <blocks.json> <doc_info.json> [output_dir]")Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Python subprocess execution detectedscripts/feishu_doc_cli.py:82 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/feishu_doc_cli.py:139 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/test_skill.py:135 · Python subprocess execution detectedresult = subprocess.run(cmd, env=env, capture_output=True, text=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedscripts/install_skill.py:33 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File type combined with upload actionoriginal-skill/feishu-doc-verifier/scripts/doc_verifier.py:42 · File type combined with upload action — agent may exfiltrate local data filesprint("Usage: python doc_verifier.py <doc_info.json> [output_dir]")Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Python subprocess execution detectedscripts/install_skill.py:16 · Python subprocess execution detectedresult = subprocess.run(["git", "--version"], capture_output=True, text=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05

Cost to the agent

Instructions loaded
≈5,243 tok
8 files · 53 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.

What would make this Verified

15 points to 80 · weights: behavior 45%, static 25%, prompt 15%, publisher 15%
  1. Unclaimed publisher≈ +8 on the totalClaim zhengyi0712: a verified publisher gets +50 on publisher trust. It is free and usually instant with GitHub sign-in.
  2. File type combined with upload action≈ +2 on the totalRemove the call, or declare the host in frontmatter and explain in the README what is sent and why.
  3. Python subprocess execution detected≈ +2 on the totalBuild commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
Publish a new version to ClawHub, then queue it here. Not your skill? Claim the handle to get verdict changes by email.Claim zhengyi0712Propose a patch to the maintainer