Review recommended
Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.
Gen Agent Trust Hub
passThe skill is a tool for querying Lark meeting notes using the lark-cli. It contains an indirect prompt injection surface as it processes identifiers and data from external sources without explicit boundary markers or sanitization.
Socket
passNo alerts
Snyk
warnRisk: MEDIUM · 1 issue