aris-feishu-notify
Integrates with Feishu/Lark to send notifications, supporting both push and interactive modes for real-time updates.
Install this skill
Security score
The aris-feishu-notify skill was audited on May 13, 2026 and we found 13 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Webhook reference - potential data exfiltration
| 3 | description: "Send notifications to Feishu/Lark. Internal utility used by other skills, or manually via /feishu-notify. Supports push-only (webhook) and interactive (bidirectional) modes. Use when use |
Webhook reference - potential data exfiltration
| 31 | "webhook_url": "https://open.feishu.cn/open-apis/bot/v2/hook/YOUR_WEBHOOK_ID", |
Webhook reference - potential data exfiltration
| 44 | | **Push only** | `"push"` | Send webhook notifications at key events. Mobile push, no reply | Feishu bot webhook URL | |
Webhook reference - potential data exfiltration
| 60 | ### Step 2: Push Notification (webhook) |
Webhook reference - potential data exfiltration
| 62 | Send a rich card to the Feishu webhook: |
Webhook reference - potential data exfiltration
| 65 | curl -s -X POST "$WEBHOOK_URL" \ |
Webhook reference - potential data exfiltration
| 118 | - **Interactive mode**: If bridge is unreachable, fall back to push mode (if webhook configured) or skip silently. |
Webhook reference - potential data exfiltration
| 128 | - If **push** mode: send webhook notification with event summary |
Access to hidden dotfiles in home directory
| 24 | The skill reads `~/.claude/feishu.json`. If this file does not exist, **all Feishu functionality is disabled** — skills behave exactly as before. |
Access to hidden dotfiles in home directory
| 52 | cat ~/.claude/feishu.json 2>/dev/null |
Access to hidden dotfiles in home directory
| 127 | Check if `~/.claude/feishu.json` exists and mode is not "off": |
External URL reference
| 31 | "webhook_url": "https://open.feishu.cn/open-apis/bot/v2/hook/YOUR_WEBHOOK_ID", |
External URL reference
| 33 | "bridge_url": "http://localhost:5000", |