Skip to content
Report library
Purpose / Other

Lark Vc Agent Skill Security Audit

What the author says it does (original text)

仅当用户或上游配置显式指定 lark-vc-agent 时使用,相关请求统一交由 lark-meeting 技能处理。

Independent security check

No obvious risks found in this check

Files checked
1
Risks found
0
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

1 instruction sections

This is a compatibility entry for an old name and states that it does not handle business operations itself. When explicitly invoked, it directs the agent to read and follow the neighboring lark-meeting skill in full.

View source
SKILL.md:13In the instructionsOpen original file
本技能只用于兼容旧名称,不直接处理业务。**MUST 完整读取 [`../lark-meeting/SKILL.md`](../lark-meeting/SKILL.md),并按照其中的路由和行动指南执行。**

The entry declares dependencies on the lark-cli executable and the lark-meeting skill. The supplied material does not include the delegated skill, so this review can confirm only the routing relationship, not which meetings, accounts, files, or network services downstream behavior may access.

View source
SKILL.md:5In the instructionsOpen original file
description: "仅当用户或上游配置显式指定 lark-vc-agent 时使用,相关请求统一交由 lark-meeting 技能处理。"metadata:  requires:    bins: ["lark-cli"]    skills: ["lark-meeting"]---
SKILL.md:15In the instructionsOpen original file
**MUST 完整读取 [`../lark-meeting/SKILL.md`](../lark-meeting/SKILL.md),并按照其中的路由和行动指南执行。**
Start here · InstructionsSKILL.md
lark-vc-agent
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions
Lines read
16
File checksum (to compare versions)
d6aaaff7e8348dcd24455e7329f0fc50d3fc5991c8abc5b5cc7ccf11262ca61d