Findings & checks · 3 flagged
HIGHLong base64-encoded blob hidden in the skill documentationSS-SKILL-INJECT-B64-PAYLOAD-01 · Prompt injection · package.json
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
- Decode the base64 string and confirm it is not an instruction directed at the agent.
- Move any legitimate binary or signature data into a dedicated file (
*.sig,SIGNATURES) outside the documentation.
Trace & refs
HIGHLong base64-encoded blob hidden in the skill documentationSS-SKILL-INJECT-B64-PAYLOAD-01 · Prompt injection · packages/feishu-markdown-mcp/package.json
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
- Decode the base64 string and confirm it is not an instruction directed at the agent.
- Move any legitimate binary or signature data into a dedicated file (
*.sig,SIGNATURES) outside the documentation.
Trace & refs
HIGHLong base64-encoded blob hidden in the skill documentationSS-SKILL-INJECT-B64-PAYLOAD-01 · Prompt injection · packages/feishu-markdown/package.json
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
- Decode the base64 string and confirm it is not an instruction directed at the agent.
- Move any legitimate binary or signature data into a dedicated file (
*.sig,SIGNATURES) outside the documentation.
Trace & refs
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Feishu Markdown
本项目是一个单仓库（monorepo），用于将 Markdown 转换为飞书 / Lark 文档格式，并提供一个 MCP 服务以便与 Model Context Protocol 集成。
主要 package：
feishu-markdown：核心库，将 Markdown 转换为飞书文档结构，支持图片、流程图（Mermaid）等处理。feishu-markdown-mcp：基于feishu-markdown的 MCP 服务，可作为模型上下文协议（Model Context Protocol）的后端插件使用。
快速开始
- 安装依赖：
pnpm install- 构建所有包：
pnpm build- 在开发中运行某个包（示例）：
pnpm --filter feishu-markdown dev开发
- 运行全部测试：
pnpm test - 代码风格与类型检查：
pnpm lint/pnpm typecheck
发布
仓库提供了 GitHub Actions 工作流用于自动发布。发布到 npm 公共仓库需要在仓库 Secrets 中配置 NPM_TOKEN（用于 pnpm publish）。
许可证
本项目使用 MIT 许可证，详见项目根目录的 LICENSE 文件。
更多信息请查看各子包的 package.json 与 README.md。