Skill audit report

lark-shared Audit report.

Use for lark-cli setup/auth tasks: auth login/status/logout, user vs bot identity, business-domain permissions (--domain, including all/docs/drive), missing scopes, revoking authorization, or handling _notice JSON.

BLOCKED · BLOCKNeeds reviewGenerated Nov 5, 2026Heuristic metadata audit
81
Audit
77
Trust
81
Quality
74
Security
88
Maintain
92
Install

OpenAgentSkill Trust Score

77
Strong shortlist

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

PASS

100

17K GitHub stars

Stars/forks activity

PASS

97

17K stars, 1.4K forks; issue activity unavailable in current metadata

Recent maintenance

PASS

88

2mo since push

License clarity

PASS

86

MIT

README/SKILL.md completeness

INFO

76

Public metadata needs stronger README/SKILL.md context

Dependency/runtime risk

WARN

54

command execution surface, credential or environment access

Install availability

PASS

92

npx skills add larksuite/cli --skill lark-shared

Install command safety

PASS

92

standard package or runtime install path

Permission surface

FAIL

36

secrets or environment access, shell or command execution

Repository evidence

PASS

86

https://github.com/larksuite/cli/tree/main/skills/lark-shared

Review status

WARN

47.64

AI review approval is missing

Agent Proven outcomes

INFO

54

No agent outcome data yet

Checks

Install and adoption review

8 Passed · 11 Needs review

Install path

92

PASS

npx skills add larksuite/cli --skill lark-shared

Repository

88

PASS

https://github.com/larksuite/cli/tree/main/skills/lark-shared

License

86

PASS

MIT

Maintenance

88

PASS

2mo since push

AI review

55

CHECK

Review approval is missing

README/SKILL.md completeness

84

PASS

Usable description available

Dependency risk

54

FIX

command execution surface, credential or environment access

Install command safety

92

PASS

standard package or runtime install path

Permission surface

36

FIX

secrets or environment access, shell or command execution

Stars/forks activity

97

PASS

17K stars, 1.4K forks; issue activity unavailable in current metadata

Adoption

88

PASS

17K GitHub stars

Warnings

  • Dependency or permission surface needs review
  • Permission surface may require sandboxing
  • AI review approval is missing
  • Quality score needs review
  • Permission surface needs review: secrets or environment access, shell or command execution
  • Dependency/runtime risk: command execution surface, credential or environment access
  • Permission surface: secrets or environment access, shell or command execution
  • Review status: AI review approval is missing

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Compare nearby options

Related skills to audit next

copywriting

When the user wants to write, rewrite, or improve marketing copy for any page — including homepage, landing pages, pricing pages, feature pages, about pages, or product pages. Also use when the user says "write copy for," "improve this copy," "rewrite this page," "marketing copy," "headline help," "CTA copy," "value proposition," "tagline," "subheadline," "hero section copy," "above the fold," "this copy is weak," "make this more compelling," or "help me describe my product." Use this whenever someone is working on website text that needs to persuade or convert. For email copy, see emails. For popup copy, see popups. For editing existing copy, see copy-editing. For the offer underneath the copy (bonuses, guarantees, value framing), see offers.

47K Stars · Audit report

cro

When the user wants to optimize, improve, or increase conversions on any marketing page or form — including homepage, landing pages, pricing pages, feature pages, lead capture forms, or contact forms. Also use when the user says 'CRO,' 'conversion rate optimization,' 'this page isn't converting,' 'improve conversions,' 'why isn't this page working,' 'my landing page sucks,' 'form abandonment,' 'nobody's converting,' 'low conversion rate,' or 'this page needs work.' Use this even if the user just shares a URL and asks for feedback. For signup/registration flows, see signup. For post-signup activation, see onboarding. For popups/modals, see popups.

47K Stars · Audit report

marketing-psychology

When the user wants to apply psychological principles, mental models, or behavioral science to marketing. Also use when the user mentions 'psychology,' 'mental models,' 'cognitive bias,' 'persuasion,' 'behavioral science,' 'why people buy,' 'decision-making,' 'consumer behavior,' 'anchoring,' 'social proof,' 'scarcity,' 'loss aversion,' 'framing,' or 'nudge.' Use this whenever someone wants to understand or leverage how people think and make decisions in a marketing context. For applying psychology to specific pages, see cro; for pricing tactics, see pricing; for copy framing, see copywriting.

54K Stars · Audit report