Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Feishu Automation

v1.0.0

Advanced automation workflows for Feishu (Lark) productivity suite. Use when you need to automate document workflows, sync data across Feishu apps, generate...

2· 691·10 current·10 all-time
byHellen@hejk
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The skill name and description match the included scripts, templates, and reference docs (batch updates, bitable→doc, wiki backup, migrations). The provided code and SKILL.md consistently target Feishu tools and tokens (doc/wiki/bitable/drive). There are no unrelated services or unexpected binaries required by the skill itself.
Instruction Scope
SKILL.md instructs the agent to use OpenClaw's Feishu integration and the included scripts for Feishu operations. The instructions and scripts focus on reading/writing Feishu documents, bitables, wikis and drive; they do not instruct reading arbitrary system files or exfiltrating data to unknown endpoints. The scripts use placeholders/comments for actual tool calls (exec/tool call) rather than embedding hidden network calls.
Install Mechanism
No install spec is present (instruction-only with bundled scripts). No network download/install steps are defined, and all code is included in the package. This is the lowest-risk install model.
Credentials
Registry metadata declares no required env vars, but the sample_config.yaml and scripts clearly expect Feishu credentials/app tokens and optional integration keys (slack webhook, SMTP, webhook secrets). This is expected for a Feishu automation skill, but the metadata omission means the skill manifest doesn't explicitly list the sensitive values you will need to supply. Users should assume Feishu app_id/app_secret or per-operation app-token values are required at runtime.
Persistence & Privilege
The skill is not marked always:true and does not request system-wide persistence or modify other skills. It writes/read local config/log/backup paths per sample_config (standard for automation tools) but does not attempt privileged system changes.
Assessment
This package appears coherent for Feishu automation, but review and take these precautions before enabling it: 1) Prepare a Feishu app with only the minimal scopes required (least privilege) and supply credentials securely (environment variables or secret manager), not committed config files. 2) The skill manifest lists no required env vars, yet sample_config.yaml shows app_id/app_secret, app_tokens, webhook URLs and SMTP credentials—expect to provide those at runtime. 3) Inspect and replace any placeholder webhook/SMTP URLs and secrets; verify external webhook endpoints are trusted before enabling notifications. 4) Run scripts in dry-run mode first (many have --dry-run) and test in a limited sandbox folder/space. 5) Check logging/backup paths and retention (logs/feishu_automation.log, backups/) and ensure sensitive tokens are masked in logs. 6) If you want stricter control, restrict allowed_users/allowed_ips in config and avoid storing long-lived credentials in repo. Overall this skill is consistent with its description but requires normal security hygiene around Feishu credentials and any external webhooks.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f16y4y0hpjjk1qazhc9mhc581gvex
691downloads
2stars
1versions
Updated 9h ago
v1.0.0
MIT-0

Feishu Automation

Overview

This skill enables advanced automation across the Feishu/Lark productivity suite. It provides recipes, scripts, and workflows for common automation scenarios like batch document processing, data synchronization, report generation, and knowledge management.

Quick Start

Prerequisites

  • OpenClaw with Feishu integration configured
  • Feishu app permissions enabled for: docx, wiki, bitable, drive
  • Target documents/tables already exist and are accessible

Basic Example: Batch Update Documents

# Use the batch_update.py script to update multiple documents
python scripts/batch_update.py --folder-token fldcnXXX --template "weekly_report.md"

Core Automation Tasks

1. Document Automation

  • Batch Creation: Create multiple documents from templates
  • Content Sync: Sync data from Bitable to documents
  • Format Conversion: Convert between markdown and Feishu doc format
  • Backup & Archive: Periodically backup important documents

2. Wiki & Knowledge Management

  • Wiki Migration: Move content between wiki spaces
  • Auto-tagging: Tag wiki pages based on content analysis
  • TOC Generation: Generate table of contents for large wikis
  • Link Checking: Find and fix broken links in wiki

3. Bitable Automation

  • Data Import/Export: Sync Bitable with external data sources
  • Report Generation: Create documents from Bitable queries
  • Validation Rules: Enforce data quality in Bitable
  • Notification System: Alert on Bitable changes

4. Cross-App Workflows

  • Document → Bitable: Extract structured data from documents to tables
  • Bitable → Document: Generate reports from table data
  • Wiki → Drive: Archive wiki pages to cloud storage
  • Drive → Wiki: Import documents as wiki pages

Workflow Templates

Weekly Report Automation

  1. Query Bitable for weekly metrics
  2. Generate markdown report with charts
  3. Create/update Feishu document
  4. Post to designated wiki space
  5. Notify team via Feishu chat

See references/weekly_report_workflow.md for detailed implementation.

Document Migration

  1. List source folder documents
  2. Convert each to markdown
  3. Create new documents in target folder/wiki
  4. Update all internal links
  5. Verify completion

See scripts/migrate_documents.py for ready-to-use script.

Tool Reference

This skill builds on OpenClaw's native Feishu tools:

  • feishu_doc - Document read/write operations
  • feishu_wiki - Knowledge base navigation
  • feishu_bitable_* - Bitable operations
  • feishu_drive - Cloud storage management

Always use the native tools directly when possible; use scripts only for complex workflows.

Included Resources

This skill comes with ready-to-use resources for common automation tasks.

scripts/

  • batch_update.py - Update multiple documents from template
  • migrate_documents.py - Migrate documents between folders/spaces
  • bitable_to_doc.py - Generate documents from Bitable data
  • wiki_backup.py - Backup wiki pages to markdown files

references/

  • weekly_report_workflow.md - Step-by-step weekly report automation
  • feishu_api_patterns.md - Common API usage patterns and examples
  • error_handling.md - Handling common Feishu API errors
  • best_practices.md - Performance and reliability tips

assets/

  • templates/weekly_report.md - Weekly report template
  • templates/meeting_notes.md - Meeting notes template
  • templates/project_status.md - Project status update template
  • config/sample_config.yaml - Configuration examples

Getting Help

For questions or issues:

  1. Check the relevant reference file first
  2. Review error messages in error_handling.md
  3. Adapt scripts to your specific use case
  4. Consult OpenClaw Feishu documentation for tool specifics

Comments

Loading comments...