lark-apps
larksuite/cli
妙搭（Spark/Miaoda）应用开发与托管：应用创建、本地全栈开发、云端生成迭代、创意设计（UI mockup / 可交互原型 / 线框图 / 落地页 / 仪表盘 / 幻灯片 deck / 视觉探索）、AI相关能力和飞书平台能力或者其他外部能力集成、日志/Trace/监控指标/PV/UV 查询、环境变量管理、应用协作者与协作权限设置、应用角色与成员管理、自动化触发器（定时/记录变更/Webhook/飞书审批）。当用户要开发/新建一个系统·工具·平台·应用，或要本地开发 / 云端开发 / 修改 / 部署 / 发布 / 上线 / 拿可分享链接，或用 HTML 做页面·网站·部署到妙搭，或要设计 / design / mockup / prototype / wireframe / 做 PPT / deck / 视觉探索，或提到妙搭/Spark/Miaoda 应用（链接形如 `/app/app_xxx` 或 `/page/<token>`，运行时域名形如 *.aiforce.cloud）、应用数据库、应用文件存储、开放 API Key、可见范围、应用协作者/开发权限、应用角色/角色成员、
The scanner found nothing risky in its 56 files.
What it does
- Runs shell commands
- Installs packages
- Reaches example.feishu.cn, localhost, miaoda.feishu.cn, sf3-scmcdn-cn.feishucdn.com, www.w3.org
- Reads TURN_ID
- Writes /agents/assets/vision-probe.png, sync.json
Findings (0)
The scanner found nothing risky in 56 files.
Decide which skills your team's agents may run
skillsvault scans every skill your organisation uses, blocks the ones you ban on every developer's machine, and keeps a tamper-evident record of every run. Free for one developer.
A deterministic scan of the skill's files as published today; it isn't a guarantee. It reads the files and reports what they do — nothing is run or installed.