.fyi
SkillsMCPPluginsSubagents

Browse by category

DevOps & CI/CD SkillsProductivity & Workflow SkillsOther SkillsProduct & Project Management SkillsDocumentation & Knowledge SkillsCode Review & Refactor SkillsBackend & APIs SkillsAgent Meta & Communication SkillsResearch SkillsSecurity SkillsUX UI & Design SkillsTesting & QA SkillsSee all →

Every Claude Code skill, MCP server, plugin and subagent in one directory. Searchable, comparable, and one command from installed. Live stats from GitHub, npm and PyPI.

We're on Product HuntYour agent's app storeCheck it out →
Agent SkillsMCP ServersPluginsSubagentsCoding Agents
CollectionsOfficial publishersGlossaryFAQBlogSearchSavedFeedback
PrivacyTermsllms.txtSitemap

made with ♥ · © 2026 aaaa.fyi

Independent project · real data from public registries

…/lark-note/security
home/skills/lark-note/security
larksuite avatar

lark-note — security audits

Review recommended

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

  • Gen Agent Trust Hub

    pass

    The skill is a tool for querying Lark meeting notes using the lark-cli. It contains an indirect prompt injection surface as it processes identifiers and data from external sources without explicit boundary markers or sanitization.

    Risk: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONJun 26, 2026Full report
  • Socket

    pass

    No alerts

    Jun 26, 2026Full report
  • Snyk

    warn

    Risk: MEDIUM · 1 issue

    Risk: MEDIUMJun 26, 2026Full report