lark-skill-maker
15Low
The skill lacks defined tool constraints, allowing unrestricted execution of commands, file operations, and network access, which poses a significant security risk for unauthorized system interaction.
HygienePackaging & Manifest1 finding
Skill Info
Namelarksuite/cli/lark-skill-maker
Registrygithub
Versioncccf025599d9
PURLpkg:github/larksuite/cli@cccf025599d9?skill=lark-skill-maker
Stars15,038
Installs299,500
Source
Install
GitHub
299,500 installs
Skills.shDocs
npx skills add https://github.com/larksuite/cliAssessments (2)
AI Agent Traps ↗Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Version History (2)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/larksuite/cli/lark-skill-maker)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/larksuite/cli/lark-skill-maker"><img src="https://mondoo.com/ai-agent-security/api/badge/github/larksuite/cli/lark-skill-maker.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/larksuite/cli/lark-skill-maker.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet, discover and control Shadow AI usage.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow