lark-im@1.0.0

VERIFIED

Publisher claims: "飞书即时通讯:收发消息和管理群聊。发送和回复消息、搜索聊天记录、管理群聊成员、上传下载图片和文件、管理表情回复、发送应用内/短信/电话加急、发送和处理交互卡片(Interactive Card)、监听卡片按钮回调(card.action.trigger)。当用户需要发消息、查看或搜索聊天记录、下载聊天中的文件、查看群成员、搜索群、创建群聊或话题群、管理标记数据、管理 Feed 置顶(添加/移除/查询置顶会话)、管理标签数据、处理卡片回调时使用。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher larksuite · joined 2 days agoInstalls 472KLast detonated 43 h ago
$npx skills add lark-im
Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
Auto-update or dynamic fetch configurationreferences/lark-im-card-action-reply.md:95 · Auto-update or dynamic fetch configuration — agent may load new code at runtime
AST06
HIGH
Authorization escalation languagereferences/lark-im-chat-identity.md:18 · Authorization escalation language
AST01