Scanned skills

larksuite/cli lark-im

Checked the catalogued skill at lark-im.

SkillTrust corpus scan 22 September 2026 v0.10.0 via skillsh Verify on GitHub
D AI-triaged 39
A Security

A set by no findings on this axis

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 39
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
references/lark-im-chat-create.md
permission_hygienehigh SD-003
references/lark-im-chat-create.md
permission_hygienehigh SD-003
references/lark-im-chat-list.md
permission_hygienehigh SD-003
references/lark-im-chat-members-list.md
permission_hygienehigh SD-003
references/lark-im-chat-messages-list.md
permission_hygienehigh SD-003
references/lark-im-chat-messages-list.md
permission_hygienehigh SD-003
references/lark-im-chat-messages-list.md
permission_hygienehigh SD-003
references/lark-im-chat-messages-list.md
permission_hygienehigh SD-003
references/lark-im-chat-messages-list.md
2 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/lark-im-card-action-reply.md

The path traversal appears only in documentation as a relative link, not in executable code.

permission_hygienehigh SD-003 benign_example
references/lark-im-chat-identity.md

Documentation reference, not executing path traversal