lark-vc — security audits

Passed all audits

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

Gen Agent Trust Hub
pass
The lark-vc skill is a legitimate tool that enables agents to interact with Lark (Feishu) video conferencing data, such as searching meeting history and retrieving meeting notes. It relies on the lark-cli utility for all operations. The skill is functionally sound and contains no malicious code, hidden URLs, or unauthorized data access patterns. It processes meeting transcripts, which creates a standard surface for indirect prompt injection, but this is handled as a low-risk architectural characteristic inherent to the skill's data-processing purpose.
Risk: SAFEPROMPT_INJECTIONMay 15, 2026Full report
Socket
pass
No alerts
May 15, 2026Full report
Snyk
pass
Risk: LOW · No issues
Risk: LOWMay 15, 2026Full report
ZeroLeaks
pass
Score: 93/100 · 2 sections analyzed
Risk: NONEApr 16, 2026Full report

lark-vc — security audits

Passed all audits

Gen Agent Trust Hub
pass
The lark-vc skill is a legitimate tool that enables agents to interact with Lark (Feishu) video conferencing data, such as searching meeting history and retrieving meeting notes. It relies on the lark-cli utility for all operations. The skill is functionally sound and contains no malicious code, hidden URLs, or unauthorized data access patterns. It processes meeting transcripts, which creates a standard surface for indirect prompt injection, but this is handled as a low-risk architectural characteristic inherent to the skill's data-processing purpose.
Risk: SAFEPROMPT_INJECTIONMay 15, 2026Full report
Socket
pass
No alerts
May 15, 2026Full report
Snyk
pass
Risk: LOW · No issues
Risk: LOWMay 15, 2026Full report
ZeroLeaks
pass
Score: 93/100 · 2 sections analyzed
Risk: NONEApr 16, 2026Full report