feishu-api-cache-fix

clawhub:feishu-api-cache-fix

View source

92/100

First Seen

Feb 18, 2026

Last Scanned

Feb 22, 2026

Findings

Score

92/100

MEDIUM 1

LOW 1

Findings (2)

MEDIUM

Privilege escalation SUPPLY_007

supply-chain L20

Detects privilege escalation patterns like setuid, chown root, or sudo with shell commands

sudo bash

FIX

Avoid depending on packages that could be subject to typosquatting or name confusion. Verify package ownership, check download counts, and audit the package source before adding dependencies.

FP?

Likely FP if the flagged package is a well-known, high-download-count package from a verified publisher.

LOW

Shell script file execution CMDEXEC_013

command-execution L20

Detects execution of shell script files via bash/sh command or direct invocation

bash fix_feishu_cache.sh

FIX

Replace direct shell script execution with a language-native implementation or a sandboxed executor. If shell scripts must run, restrict them to a vetted allowlist with integrity checks.

FP?

Likely FP if the match references running a script that is part of the skill's own repository (e.g., ./setup.sh) with clear, auditable contents.