Skills/skills.sh/lark-sheets

lark-sheets@3.5.2

CAUTION

Publisher claims: "飞书电子表格：创建和操作电子表格。支持工作表与行列结构（增删/合并/尺寸/隐藏/冻结/分组）、单元格读写（值/公式/样式/批注/单元格图片）、区域复制移动排序填充、查找替换、批量更新，图表、透视表、条件格式、筛选器与筛选视图、下拉列表、迷你图、浮动图片等对象的创建与维护，以及公式校验、历史版本回滚、本地 Excel/CSV 与飞书表格的导入导出。当用户需要创建或编辑表格、统计汇总与可视化、表格美化、公式计算（含 Excel 公式迁移）、金融/财务建模（DCF、三张表、预算、Sensitivity 等）时使用。多维表格（Base/bitable）请改用 lark-base；若用户是想按名称或关键词搜索云空间（云盘/云存储）里的表格文件，请改用 lark-drive 的 drive +search 先定位资源。当用户给出 doubao.com 的 /sheets/ URL/token 时，也应直接使用本 skill，不要因为域名不是飞书而回退到 WebFetch；路由依据是 URL 路径模式和 token，而不是域名。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher larksuite · joined 2 days agoInstalls 471KLast detonated 43 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
File type combined with upload actionreferences/lark-sheets-read-data.md:172 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionSKILL.md:133 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/lark-sheets-read-data.md:191 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/lark-sheets-batch-update.md:169 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Python subprocess execution detectedreferences/lark-sheets-read-data.md:294 · Python subprocess execution detected
AST05
HIGH
Python subprocess execution detectedreferences/lark-sheets-read-data.md:304 · Python subprocess execution detected
AST05
MEDIUM
File type combined with upload actionreferences/lark-sheets-read-data.md:205 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
Python subprocess execution detectedscripts/lark_sheet_read_cli.py:68 · Python subprocess execution detected
AST05
lark-sheets@3.5.2 — Caution 74/100 — KillerSkills