Scanned skills

larksuite/cli lark-slides

Checked the catalogued skill at lark-slides.

SkillTrust corpus scan 6 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 233
D Security

D set by findings not listed

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 233
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
references/cli/lark-slides-replace-slide.md
permission_hygienehigh SD-003
references/cli/lark-slides-replace-slide.md
permission_hygienehigh SD-003
references/cli/lark-slides-replace-slide.md
permission_hygienehigh SD-003
references/workflow/error-handling.md
permission_hygienehigh SD-003
references/workflow/slides-editing.md
transparencymedium SD-007
references/xml/slides_xml_schema_definition.xml
transparencymedium SD-007
references/xml/slides_xml_schema_definition.xml
transparencymedium SD-007
references/xml/slides_xml_schema_definition.xml
transparencymedium SD-007
references/xml/slides_xml_schema_definition.xml
3 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
references/cli/lark-slides-add-slide.md

The text documents safe CLI behavior, explicitly rejecting absolute and ../ paths, so it poses no threat.

permission_hygienehigh SD-003 benign_example
references/cli/lark-slides-update-slide.md

The text merely documents the intended path resolution behavior of the CLI; it does not contain an active traversal exploit.

transparencymedium SD-007 benign_example
references/xml/slides_chart_demo.xml

The URL appears only as an XML namespace declaration, not an outbound network request or permission grant.