Scanned skills

larksuite/cli lark-mail

Checked the catalogued skill at lark-mail.

SkillTrust corpus scan 22 September 2026 v0.10.0 via skillsh Verify on GitHub
F AI-triaged 33
F Security

F; retained sample includes a critical finding · SD-002 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 33
permission_hygienehigh SD-003
SKILL.md
securitycritical SD-002
SKILL.md
permission_hygienehigh SD-003
references/lark-mail-decline-receipt.md
permission_hygienehigh SD-003
references/lark-mail-draft-create.md
permission_hygienehigh SD-003
references/lark-mail-forward.md
permission_hygienehigh SD-003
references/lark-mail-html.md
permission_hygienehigh SD-003
references/lark-mail-html.md
permission_hygienehigh SD-003
references/lark-mail-html.md
permission_hygienehigh SD-003
references/lark-mail-html.md
permission_hygienehigh SD-003
references/lark-mail-message.md
3 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/lark-mail-draft-edit.md

Reference to a relative path in documentation, not used to access filesystem at runtime.

permission_hygienehigh SD-003 benign_example
references/lark-mail-lint-html.md

The referenced path is a documentation link, not executable code, so it does not pose a real path traversal threat.

permission_hygienehigh SD-003 benign_example
references/lark-mail-thread-modify.md

The path is a relative link in documentation, not an attempt to access system files.