Personal Crm
v1.1.0Personal relationship manager powered by Feishu/Lark Bitable. Track contacts, interactions, birthdays (including Chinese lunar calendar), anniversaries, and...
⭐ 2· 358·1 current·1 all-time
byAndre@andrelyl
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Personal CRM powered by Feishu/Lark Bitable) match the artifacts: SKILL.md, README, SETUP.md, and a contact-import script that reads ~/.openclaw/openclaw.json and talks to Feishu APIs. Required config (Feishu app id/secret and Bitable app_token/table_id) is appropriate for the declared functionality.
Instruction Scope
Most runtime instructions are scoped to creating/reading/modifying Bitable tables and reading the user's OpenClaw config. Two points to note: (1) activation language and feature copy emphasize 'automatic capture' of conversational mentions — this implies the agent should proactively record mentions, which is a behavioral design choice (privacy-sensitive) but consistent with the described feature; (2) the SKILL.md/promotional text says it can 'sync phone contacts' and 'import from WeChat', but only a CSV/vCard import script is included — direct phone/WeChat sync code is not present, so those capabilities are overclaimed unless the platform provides them separately.
Install Mechanism
This is an instruction-only skill with no install spec; a single Python utility is included. No remote downloads or installer scripts are present, which is the lower-risk pattern.
Credentials
The skill expects Feishu/Lark credentials (appId/appSecret and a Bitable app_token and table IDs) stored in ~/.openclaw/openclaw.json — which is appropriate. The repo metadata does not declare environment variables, but the included script also accepts FEISHU_* environment variables as an alternate input method; that's reasonable but worth noting (script reads FEISHU_APP_ID, FEISHU_APP_SECRET, FEISHU_APP_TOKEN, FEISHU_TABLE_ID). No unrelated credentials or broad secret access are requested.
Persistence & Privilege
Skill is not marked always:true and does not request elevated platform privileges. Optional cron setup is provided but is a user action. The skill does not modify other skills or system-wide configs beyond its own OpenClaw config entries.
Assessment
This skill appears to do what it says: store and manage contacts in your Feishu/Lark Bitable. Before installing:
- Confirm you are comfortable granting the Feishu app the bitable read/write scopes it requests and keep appSecret/app_token private.
- The import tool reads ~/.openclaw/openclaw.json (and will accept FEISHU_* env vars) — review that file for sensitive data before running imports.
- The README and SKILL.md talk about "automatic capture" of conversational mentions and about syncing phone/WeChat contacts; only CSV/vCard import code is included. If you rely on phone/WeChat sync, verify where that functionality actually comes from (platform extension or another tool) before expecting it.
- If you enable the suggested cron reminders, check which message channel the skill will post reminders to (so personal data isn't sent to an unexpected destination).
If you want extra assurance, review the full import_contacts.py (it uses Feishu APIs via HTTPS and local config only) and test with a disposable Feishu Bitable/app_token first.Like a lobster shell, security has layers — review code before you run it.
bitablevk97ennew5cddmcfy4pg2wepbw182a7ghcontactsvk97ennew5cddmcfy4pg2wepbw182a7ghcrmvk97ennew5cddmcfy4pg2wepbw182a7ghfeishuvk97ennew5cddmcfy4pg2wepbw182a7ghlatestvk97ennew5cddmcfy4pg2wepbw182a7gh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💝 Clawdis
Configfeishu.enabled
