Skip to content
skillsafebeta
← Report library
Purpose / Other

Lark Workflow Standup Report Skill Security Audit

What the author says it does (original text)

日程待办摘要：编排 calendar +agenda 和 task +get-my-tasks，生成指定日期的日程与未完成任务摘要。适用于了解今天/明天/本周的安排。

Independent security check

Security risks found

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.Risks found: 1
Medium risk

Unisolated calendar and task text may influence the AI-generated report

Source references: 3
What we found

The workflow passes meeting/event and task results directly to the AI for integration, but the visible rules do not require externally editable text such as event titles and task summaries to be treated strictly as data. An invitation or task containing directions such as “ignore the rules” or “hide this item” could be mistaken for an instruction.

Why this matters

The report could omit, distort, or unnecessarily disclose schedule and task information, misleading decisions about conflicts, priorities, or free time. The visible workflow only produces a report, so there is no evidence that it modifies the account in response.

The workflow explicitly sends calendar and task results to AI summarization and requires event names and task summaries in the output, but it does not say those fields are untrusted data that must never be followed as instructions. If collaborators can supply meeting titles or task text, prompt-like content could influence the report, such as causing omissions, rewrites, or fabricated content. The source does not show that such text exists or that an attack occurred. A user can ask for strict data/instruction separation and field-only extraction during summarization.

SKILL.md:33In the instructions
```{date} ─┬─► calendar +agenda [--start/--end]              ──► 日程列表（会议/事件）        └─► task +get-my-tasks --complete=false [--due-end] ──► 未完成待办列表                    │                    ▼              AI 汇总（时间转换 + 冲突检测 + 排序）──► 摘要```
Show 2 other places
SKILL.md:73In the instructions
### Step 3: AI 汇总将 Step 1 和 Step 2 的结果整合，按以下结构输出：
SKILL.md:80In the instructions
### 日程安排| 时间 | 事件 | 组织者 | 状态 ||------|------|--------|------|| 09:00-10:00 | 产品需求评审 | 张三 | 已接受 || 14:00-15:00 | 技术方案讨论 | 李四 | 待确认 |### 待办事项- [ ] {task_summary}（截止：{due_date}）- [ ] {task_summary}
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

5 instruction sections

The Skill uses the user's identity to read calendar events and incomplete tasks for a selected date, then has the AI convert times, sort entries, detect schedule conflicts, and produce a summary.

View source
SKILL.md:24In the instructions
仅支持 **user 身份**。执行前确保已授权：```bashlark-cli auth login --domain calendar,task```
SKILL.md:33In the instructions
```{date} ─┬─► calendar +agenda [--start/--end]              ──► 日程列表（会议/事件）        └─► task +get-my-tasks --complete=false [--due-end] ──► 未完成待办列表                    │                    ▼              AI 汇总（时间转换 + 冲突检测 + 排序）──► 摘要```

Its declared permissions are read-only calendar-event and task access; the shown commands do not request writing, deletion, or modification of calendars or tasks.

View source
SKILL.md:111In the instructions
## 权限表| 命令 | 所需 scope ||------|-----------|| `calendar +agenda` | `calendar:calendar.event:read` || `task +get-my-tasks` | `task:task:read` |

The default task query returns at most 20 entries. It can be narrowed by due date or expanded with `--page-all` to retrieve every incomplete task. The report displays events, organizers, status, task summaries, and due dates.

View source
SKILL.md:57In the instructions
```bash# 默认 pending 摘要：必须显式过滤未完成任务（最多 20 条）lark-cli task +get-my-tasks --complete=false# 只看指定日期前到期的未完成任务（推荐用于摘要场景，减少数据量）lark-cli task +get-my-tasks --complete=false --due-end "2026-03-27T23:59:59+08:00"# 获取全部未完成任务（超过 20 条时）lark-cli task +get-my-tasks --complete=false --page-all```
SKILL.md:80In the instructions
### 日程安排| 时间 | 事件 | 组织者 | 状态 ||------|------|--------|------|| 09:00-10:00 | 产品需求评审 | 张三 | 已接受 || 14:00-15:00 | 技术方案讨论 | 李四 | 待确认 |### 待办事项- [ ] {task_summary}（截止：{due_date}）- [ ] {task_summary}
Start here · InstructionsSKILL.md
lark-workflow-standup-report
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:26In the instructions
```bashlark-cli auth login --domain calendar,task
SKILL.md:42In the instructions
```bash# 今天（默认，无需额外参数）
SKILL.md:56In the instructions
```bash# 默认 pending 摘要：必须显式过滤未完成任务（最多 20 条）
Lines read
123
File checksum (to compare versions)
e941406f22314e3d16861cae2b7b01869bc6ce819e2ce6f18b459875ba71cee4