·
Last changedVersion:
This version passed the hardening gate. Hardening applied 2 targeted changes and preserved all other text. Classified findings before hardening: 2. Classified findings closed: 1. Classified findings remaining: 1. Unclassified scanner findings remaining: 0. Review findings closed: 2. Review findings remaining: 11.
1
1
1
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
references/genres/route-knowledge.md | Prompt Injection | Direct prompt injection | Medium | Closed | |
references/lark-doc-create.md | Tool & MCP Manipulation | MCP configuration abuse | Low | Open |
2 findings
CRITICAL：先判断场景，再读取该场景的参考文件；不要在任务开始时一次性读取全部参考文件。每个文件只在首次进入对应阶段时读取一次。
身份：文档操作推荐显式指定 --as user。
本地文件引用统一遵循文件访问权限：CWD 内优先使用 @./相对路径，其他目录使用 @绝对路径。XML 内的相对资源路径先查 CWD；仅文件不存在时再查源 XML 文件所在目录，同名文件以 CWD 为准。内联内容、stdin、在线文档没有源文件目录，不执行回退。
+fetch：先读参考再获取文档。创建工作流：先完整执行创建工作流，简单任务不是跳过的理由；+create：仅创建空文档或原样导入用户提供的完整内容时，跳过创建工作流。+update：语义改写、润色、重组、补写或排版均按 update 参考完成。+script：支持解析文档 URL / token 与本地 XML，统计字数并返回字符诊断；不支持 Markdown 输入。+history-list / +history-revert / +history-revert-status：查询、回滚文档历史版本或检查回滚任务状态。+media-insert：在文末插入本地图片或文件。+media-preview：预览文档或评论中的图片、附件或素材。+media-download：下载文档中的图片、附件、素材或画板缩略图。+resource-download / +resource-update / +resource-delete：下载、更新或删除 Docx 封面。画板工作流：创建或更新画板时先读取工作流；更新已有画板必须复用现有 token，禁止新建空白画板；使用 whiteboard +update 写入。mindnotes：已有思维笔记走 思维笔记链路；新建思维笔记走 lark-doc-whiteboard。执行 Shortcut 时，不预读 lark-shared 或预跑 auth status --verify；仅遇到未认证、token / 身份或 scope 错误时读取该 Skill，修复后重试。认证、身份或 scope 管理请求则直接使用该 Skill。
lark-drive。复制文档、创建副本或另存为副本时，按其指引使用 lark-cli drive files copy；不要用 docs +fetch + docs +create 重建正文。lark-drive；只需紧凑评论上下文时，直接使用默认 JSON 响应的 docs +fetch。Get started with chainctlchainctl skill install public/larksuite/lark-doc:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/larksuite/skills/lark-doc:latest
MIT
HARDENING.md
LICENSE
SKILL.md
references/genres/business-analysis.md
references/genres/data-report.md
references/genres/email.md
references/genres/execution-plan.md
references/genres/formal-doc.md
references/genres/meeting-minutes.md
references/genres/memo-brief.md
references/genres/official-redhead.md
references/genres/prd.md
references/genres/proposal.md
references/genres/research-report.md
references/genres/retrospective.md
references/genres/route-consumer.md
references/genres/route-creative.md
references/genres/route-knowledge.md
references/genres/route-marketing.md
references/genres/route-media.md
references/genres/route-opinion.md
references/genres/route-personal-brand.md
references/genres/route-platform.md
references/genres/route-report.md
references/genres/route-workplace.md
references/genres/sop-tutorial.md
references/genres/technical-doc.md
references/genres/wechat.md
references/genres/weekly-report.md
references/genres/white-paper.md
references/genres/xiaohongshu.md
references/lark-doc-create-workflow.md
references/lark-doc-create.md
references/lark-doc-fetch.md
references/lark-doc-history.md
references/lark-doc-md.md
references/lark-doc-media-download.md
references/lark-doc-media-insert.md
references/lark-doc-media-preview.md
references/lark-doc-mindnote.md
references/lark-doc-resource-cover.md
references/lark-doc-script.md
references/lark-doc-update.md
references/lark-doc-whiteboard.md
references/lark-doc-xml-extended-blocks.md
references/lark-doc-xml.md