Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
feishu-image-sender
v0.0.3飞书图片发送工具,支持系统截屏、区域截图和本地图片文件发送到飞书工作区,方便快速分享屏幕内容。
⭐ 1· 313·0 current·0 all-time
byAI悦创Python一对一辅导@andersonhjb
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description: send screenshots/images to Feishu — matches most of the code. But the package declares no required binaries, env vars, or OS restriction while the scripts actually require macOS tools (/usr/sbin/screencapture, sips), python3, and Pillow. The code also hard-codes a user workspace path (/Users/bornforthis/.openclaw/workspace) and a different skill install path (/opt/homebrew/...), which is not portable and inconsistent with the claimed metadata.
Instruction Scope
Runtime instructions and scripts perform screenshots, copy files into a per-user workspace, compress images, and call message(action='send', media=...). They do not read arbitrary system config files, nor do they reach out to arbitrary network endpoints in the code provided. However the skill assumes the existence of a platform 'message' API (imported dynamically) and does not document required credentials if network/Feishu API access is needed. The hard-coded user path and the expectation that CLI commands like feishu-image-screenshot are available (no install step) are scope/operational issues.
Install Mechanism
No install spec is declared, yet the bundle contains multiple scripts that expect to be invoked as commands. There is no documented installation step to place these scripts on PATH or mark them executable. This mismatch makes the skill brittle and confusing for users and operators.
Credentials
The skill declares no required environment variables or credentials, yet sending messages to Feishu normally requires authentication. The code calls a 'message' function via a dynamic import (from message import message) without explaining where credentials/tokens are configured. Required external tools (screencapture, sips) and Python/Pillow are also not declared. Missing declarations are disproportionate to the task and leave unclear how Feishu auth is provided.
Persistence & Privilege
The skill does not request always: true and does not modify other skills or system configs. It creates and writes files to a user workspace and /tmp (expected for screenshots). This is within expected privilege for a screenshot-and-send tool, though users should be aware screenshots can contain sensitive data.
What to consider before installing
This skill mostly does what it claims (take screenshots, compress, and send), but there are several red flags you should resolve before installing:
- Platform & OS: The scripts call /usr/sbin/screencapture and sips (macOS). If you are not on macOS this will fail; the skill's metadata does not declare this requirement.
- Undeclared dependencies: The code requires python3 and the Pillow (PIL) library. Add these to the requirements or install them first.
- Missing Feishu auth explanation: The code calls a message(action='send', media=...) via a 'message' module but does not document how Feishu credentials or tokens are provided. Confirm where the message API comes from (OpenClaw runtime?) and how authentication is performed. Do not provide Feishu or other tokens until you verify how they are stored and used.
- Hard-coded paths: The skill hard-codes /Users/bornforthis/.openclaw/workspace and an install path. Update config (settings.sh) to point at your actual home/workspace and verify file permissions.
- No install step: The package provides scripts but no install mechanism to place them on PATH; either run them with explicit paths or add a safe install step.
- Privacy risk: Screenshots can capture sensitive info. Only run this skill in environments where you trust the runtime and have control over where images are sent.
Recommended actions before use: inspect/grep the runtime for where 'message' is implemented, add/require explicit environment variables for any Feishu credentials, update settings.sh to your paths, and test in a controlled environment. If you can't confirm the origin/behavior of the 'message' API or how authentication is handled, treat the skill as risky and avoid granting it network/credential access.Like a lobster shell, security has layers — review code before you run it.
latestvk97ctmn0gx3snzbxjt4pxqhha9831xtq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
