OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill is designed to manage tasks in Feishu/Lark using the lark-cli tool. It provides structured shortcuts for common operations like creating, updating, and searching for tasks. The skill includes security-conscious instructions, such as requiring write confirmations and enforcing relative path constraints for file uploads. A low-risk vulnerability to indirect prompt injection exists because the skill processes task content (summaries, descriptions, comments) that can be authored by external users.
Detected behaviors
No alerts
1 issue
Score: 93/100 · 2 sections analyzed