lark-drive
Manages cloud storage files and folders, enabling uploads, downloads, and document management within Lark's ecosystem.
Install this skill
or
94/100
Security score
The lark-drive skill was audited on Jun 12, 2026 and we found 6 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
low line 53
External URL reference
SourceSKILL.md
| 53 | | `/docx/` | `https://example.larksuite.com/docx/doxcnxxxxxxxxx` | `file_token` | URL 路径中的 token 直接作为 `file_token` 使用 | |
low line 54
External URL reference
SourceSKILL.md
| 54 | | `/doc/` | `https://example.larksuite.com/doc/doccnxxxxxxxxx` | `file_token` | URL 路径中的 token 直接作为 `file_token` 使用 | |
low line 55
External URL reference
SourceSKILL.md
| 55 | | `/wiki/` | `https://example.larksuite.com/wiki/wikcnxxxxxxxxx` | `wiki_token` | 不能直接当底层 `file_token`；优先用 `drive +inspect` 解包获取 `obj_token` | |
low line 56
External URL reference
SourceSKILL.md
| 56 | | `/sheets/` | `https://example.larksuite.com/sheets/shtcnxxxxxxxxx` | `file_token` | URL 路径中的 token 直接作为 `file_token` 使用 | |
low line 57
External URL reference
SourceSKILL.md
| 57 | | `/drive/folder/` | `https://example.larksuite.com/drive/folder/fldcnxxxx` | `folder_token` | URL 路径中的 token 作为文件夹 token 使用 | |
low line 62
External URL reference
SourceSKILL.md
| 62 | lark-cli drive +inspect --url 'https://xxx.feishu.cn/wiki/wikcnXXX' |
Scanned on Jun 12, 2026
View Security DashboardGitHub Stars 13.3K
Rate this skill
Categorymarketing
UpdatedJune 13, 2026
frontendpowerpointreactexceldocxapicontent-marketerproduct-marketercustomer-success-managermarketingsales
larksuite/cli