lark-im
飞书即时通讯：收发消息和管理群聊。发送和回复消息、搜索聊天记录、管理群聊成员、上传下载图片和文件（支持大文件分片下载）、管理表情回复、发送应用内/短信/电话加急、发送和处理交互卡片（Interactive Card）、监听卡片按钮回调（card.action.trigger）。当用户需要发消息、查看或搜索聊天记录、下载聊天中的文件、查看群成员、搜索群、创建群聊或话题群、管理标记数据、管理 Feed 置顶（添加/移除/查询置顶会话）、管理标签数据、处理卡片回调时使用。
Rank#2763
larksuiteskills.shCli wrapper462,773Last updated Oct 9, 2026, 02:50 PMskills.sh/larksuite/cli/lark-im
- Created
- 7 months ago
- Last commit
- yesterday
- Latest release
- v1.0.972 weeks ago
Security Findings
Local instruction indirection
SuspiciousAnalyzerSKILL.md redirects the agent to follow instructions in local secondary file lark-im-card-create.md
Flagged by the hosting marketplace
SuspiciousLineagethe skills.sh security audit flagged this skill (status=warn, risk=medium) — Snyk: W011 Third-party content exposure detected (indirect prompt injection risk). — Third-party content exposure detected (medium risk: 0.30). The skill workflow monitors and reads chat messages via +chat-messages-list and related commands, allowing outsider-submitted messages from group chats to be ingested by the agent.
Versions
6- Scanned Oct 9, 2026, 02:50 PMLow
- Scanned Aug 3, 2026, 08:26 PMLow
- Scanned Jul 15, 2026, 06:21 AMLow
- Scanned Jun 1, 2026, 05:51 AMNone known
- Scanned Apr 28, 2026, 04:52 PMUnknown
- Scanned Apr 7, 2026, 02:00 PMUnknown