Skip to content
Report library
Purpose / Other

Lark Note Skill Security Audit

What the author says it does (original text)

仅当用户或上游配置显式指定 lark-note 时使用,相关请求统一交由 lark-meeting 技能处理。

Independent security check

Security risks found

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.Risks found: 1
Medium risk

Operational rules are mandatorily delegated to another skill that was not supplied for audit

Source references: 3
What we found

The entry explicitly requires the agent to read and execute ../lark-meeting/SKILL.md in full, but that source is absent from the submitted material. Reviewing this wrapper alone therefore cannot reveal which files, credentials, or Lark account actions will be requested or whether they match the user's request.

Why this matters

If the environment's lark-meeting skill is substituted, version-mismatched, or over-privileged, invoking lark-note inherits that behavior; the visible wrapper places no limits on operations or permission scope.

This skill does not handle the task itself; it requires the agent to read and follow a `lark-meeting` skill that is absent from the supplied material. When a user or upstream configuration explicitly invokes `lark-note`, that external skill determines any file, credential, or Lark-account actions, so this entry alone cannot establish their scope or authorization. Before enabling it, the user can request a separate audit of `../lark-meeting/SKILL.md` and restrict accessible files, credentials, and account permissions.

SKILL.md:4In the instructionsOpen original file
version: 1.0.0description: "仅当用户或上游配置显式指定 lark-note 时使用,相关请求统一交由 lark-meeting 技能处理。"metadata:  requires:    bins: ["lark-cli"]    skills: ["lark-meeting"]---
Show 2 other places
SKILL.md:13In the instructionsOpen original file
本技能只用于兼容旧名称,不直接处理业务。**MUST 完整读取 [`../lark-meeting/SKILL.md`](../lark-meeting/SKILL.md),并按照其中的路由和行动指南执行。**
SKILL.md:8In the instructionsOpen original file
    bins: ["lark-cli"]    skills: ["lark-meeting"]---
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

1 instruction sections

This is a legacy-name compatibility entry and does not handle the task itself; when invoked, it requires the agent to read and follow another skill named lark-meeting in full.

View source
SKILL.md:13In the instructionsOpen original file
本技能只用于兼容旧名称,不直接处理业务。**MUST 完整读取 [`../lark-meeting/SKILL.md`](../lark-meeting/SKILL.md),并按照其中的路由和行动指南执行。**

The manifest declares that the environment requires the lark-cli executable and the lark-meeting skill, but the visible content contains no installation command or direct invocation of that program.

View source
SKILL.md:5In the instructionsOpen original file
description: "仅当用户或上游配置显式指定 lark-note 时使用,相关请求统一交由 lark-meeting 技能处理。"metadata:  requires:    bins: ["lark-cli"]    skills: ["lark-meeting"]---
Start here · InstructionsSKILL.md
lark-note
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions
Lines read
16
File checksum (to compare versions)
3dbc66f29d12e6a58b95dc4ff70568987c11745716c4fc6aad764f83cf078b50