lark-apps

SAFE max severity MEDIUMSkillSpector Caution 9 registry open.feishu.cn last scanned 1 scan

Verdict safe, but 51 findings (2 medium, 48 low, 1 info), mainly obfuscation, social engineering, policy violation. Most recent scan 2026-10-22.

Findings51
Critical0
High0
Medium2
Low48
Analyzersstatic bytecode pipeline correlation behavioral trigger
Scanner version2.3.1

Second scanner: NVIDIA SkillSpector

VerdictCaution 9
Score9 / 100
Issues1
Categoriesanalysis-evasion
Version2.12.0 (static)

Independent static run, no language model, over the same files as the Cisco scan above. How the two scanners compare across the whole corpus: Two scanners, one corpus.

What this skill does

The skill's SKILL.md has no description field.

Package
57 files, 425 KB
SKILL.md
516 words
Code
JavaScript (8)

Findings

MEDIUM File extension does not match actual content type Obfuscationstatic

File 'vision-probe.png' extension (.png, expected image) does not match its actual content type (HTML document, code).

creative-design/agents/assets/vision-probe.png

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
MEDIUM File extension does not match actual content type Obfuscationstatic

File 'deck-stage.js' extension (.js) suggests one format but Magika detected a different text format: HTML document (html). This may indicate content obfuscation or a misnamed file.

creative-design/starter-components/deck-stage.js

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW Hidden data file detected Obfuscationstatic

Hidden file found: .wellknown-origin.json. Hidden files may contain concealed configuration or data that should be reviewed.

.wellknown-origin.json

Remediation: Move file to a visible location or document its purpose.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'SKILL.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

SKILL.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW Skill description is too short Social Engineeringtrigger

Description has only 3 words. Short descriptions may not provide enough context for the agent to determine when this skill should be used.

SKILL.md

Remediation: Expand the description to at least 10-20 words explaining the skill's purpose, capabilities, and appropriate use cases.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'fork-verifier-agent.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

creative-design/agents/fork-verifier-agent.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'vision-probe-agent.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

creative-design/agents/vision-probe-agent.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'creative-design.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

creative-design/creative-design.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'aily.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

creative-design/references/aily.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'animated-video.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

creative-design/references/animated-video.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'charts.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

creative-design/references/charts.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'claude.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

creative-design/references/claude.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'codex.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

creative-design/references/codex.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'data-report.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

creative-design/references/data-report.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'frontend-design.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

creative-design/references/frontend-design.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'hi-fi-design.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

creative-design/references/hi-fi-design.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'interactive-prototype.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

creative-design/references/interactive-prototype.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'make-a-deck.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

creative-design/references/make-a-deck.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'visual-exposure.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

creative-design/references/visual-exposure.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'wireframe.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

creative-design/references/wireframe.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-access-scope-get.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-access-scope-get.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-access-scope-set.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-access-scope-set.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-automation.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-automation.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-cache.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-cache.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-cloud-dev.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-cloud-dev.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-create.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-create.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-db-execute.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-db-execute.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-db.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-db.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-env-pull.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-env-pull.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-env.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-env.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-export.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-export.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-file.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-file.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-get.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-get.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-git-credential.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-git-credential.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-html-publish.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-html-publish.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-init.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-init.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-list.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-list.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-local-dev.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-local-dev.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-observability.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-observability.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-openapi-key.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-openapi-key.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-plugin-install.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-plugin-install.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-plugin-list.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-plugin-list.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-plugin-uninstall.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-plugin-uninstall.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-release-create.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-release-create.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-release-get.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-release-get.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-release-list.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-release-list.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-role.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-role.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-session-messages-list.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-session-messages-list.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-update.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-update.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
LOW File extension does not match actual content type Obfuscationstatic

Markdown file 'lark-apps-user-id-convert.md' reads mostly as HTML document (html). Markdown commonly embeds code, so this is reported for visibility rather than as obfuscation.

references/lark-apps-user-id-convert.md

Remediation: Rename the file to match its actual content type, or remove it if it appears malicious.
INFO Strict manifest load failed; inert fallback scan used Policy Violationskill_loader

SkillLoadError rejected malformed or missing manifest metadata. The bounded package body was still scanned as inert content; manifest capabilities were not trusted.

SKILL.md

Remediation: Repair the YAML frontmatter and provide the required manifest fields.

What is in the package

57 files, 425 KB. Show the list.
FileKindSize
.wellknown-origin.jsonconfig2.5 KB
SKILL.mddoc7.5 KB
creative-design/creative-design.mddoc7.5 KB
references/lark-apps-access-scope-get.mddoc7.5 KB
references/lark-apps-access-scope-set.mddoc7.5 KB
references/lark-apps-automation.mddoc7.5 KB
references/lark-apps-cache.mddoc7.5 KB
references/lark-apps-cloud-dev.mddoc7.5 KB
references/lark-apps-create.mddoc7.5 KB
references/lark-apps-db-execute.mddoc7.5 KB
references/lark-apps-db.mddoc7.5 KB
references/lark-apps-env-pull.mddoc7.5 KB
references/lark-apps-env.mddoc7.5 KB
references/lark-apps-export.mddoc7.5 KB
references/lark-apps-file.mddoc7.5 KB
references/lark-apps-get.mddoc7.5 KB
references/lark-apps-git-credential.mddoc7.5 KB
references/lark-apps-html-publish.mddoc7.5 KB
references/lark-apps-init.mddoc7.5 KB
references/lark-apps-list.mddoc7.5 KB
references/lark-apps-local-dev.mddoc7.5 KB
references/lark-apps-observability.mddoc7.5 KB
references/lark-apps-openapi-key.mddoc7.5 KB
references/lark-apps-plugin-install.mddoc7.5 KB
references/lark-apps-plugin-list.mddoc7.5 KB
references/lark-apps-plugin-uninstall.mddoc7.5 KB
references/lark-apps-release-create.mddoc7.5 KB
references/lark-apps-release-get.mddoc7.5 KB
references/lark-apps-release-list.mddoc7.5 KB
references/lark-apps-role.mddoc7.5 KB
references/lark-apps-session-messages-list.mddoc7.5 KB
references/lark-apps-update.mddoc7.5 KB
references/lark-apps-user-id-convert.mddoc7.5 KB
creative-design/agents/fork-verifier-agent.mddoc7.5 KB
creative-design/agents/vision-probe-agent.mddoc7.5 KB
creative-design/assets/index.htmldata7.5 KB
creative-design/references/aily.mddoc7.5 KB
creative-design/references/animated-video.mddoc7.5 KB
creative-design/references/charts.mddoc7.5 KB
creative-design/references/claude.mddoc7.5 KB
creative-design/references/codex.mddoc7.5 KB
creative-design/references/data-report.mddoc7.5 KB
creative-design/references/frontend-design.mddoc7.5 KB
creative-design/references/hi-fi-design.mddoc7.5 KB
creative-design/references/interactive-prototype.mddoc7.5 KB
creative-design/references/make-a-deck.mddoc7.5 KB
creative-design/references/visual-exposure.mddoc7.5 KB
creative-design/references/wireframe.mddoc7.5 KB
creative-design/starter-components/android-frame.jsxscript7.5 KB
creative-design/starter-components/animations.jsxscript7.5 KB
creative-design/starter-components/browser-window.jsxscript7.5 KB
creative-design/starter-components/deck-stage.jsscript7.5 KB
creative-design/starter-components/design-canvas.jsxscript7.5 KB
creative-design/starter-components/ios-frame.jsxscript7.5 KB
creative-design/starter-components/macos-window.jsxscript7.5 KB
creative-design/starter-components/tweaks-panel.jsxscript7.5 KB
creative-design/agents/assets/vision-probe.pngimage7.5 KB

External hosts referenced

open.feishu.cn

Hostnames that appear in the skill's files. Referencing a host is not a finding; compare against the findings above and the skill's stated purpose.

Package contents recorded 2026-10-22. The scan above ran against the version current at scan time; the two can differ if the skill has since been updated.

What we checked

What we did not check

Sources

Related skills