Scanned skills

larksuite/cli lark-event

Checked the catalogued skill at lark-event.

SkillTrust corpus scan 22 September 2026 v0.10.0 via skillsh Verify on GitHub
D AI-triaged 6
A Security

A set by no findings on this axis

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

6 findings
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
references/lark-event-im.md
permission_hygienehigh SD-003
references/lark-event-im.md
permission_hygienehigh SD-003
references/lark-event-im.md
permission_hygienehigh SD-003
references/lark-event-whiteboard.md
4 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/lark-event-approval.md

The reference to ../SKILL.md is a documentation link, not code execution, so it does not pose a threat.

permission_hygienehigh SD-003 benign_example
references/lark-event-minutes.md

The reference to ../SKILL.md is a documentation link, not an executable path traversal.

permission_hygienehigh SD-003 benign_example
references/lark-event-task.md

The ../ reference is a normal relative link in documentation, not an executable path traversal.

permission_hygienehigh SD-003 benign_example
references/lark-event-vc.md

The path reference is in documentation, not code execution, so no threat.