Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Feishu Cron Announce

v1.0.0

创建定时任务并通过 OpenClaw cron announce 直接推送结果到飞书。当需要设置定时监控任务(如版本发布、天气、股票等)并让结果自动推送到飞书时使用。关键词:飞书定时推送、cron 定时任务、飞书 announce、定时监控、飞书监控通知。

0· 72·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for bbj375767338-arch/feishu-cron-announce.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Feishu Cron Announce" (bbj375767338-arch/feishu-cron-announce) from ClawHub.
Skill page: https://clawhub.ai/bbj375767338-arch/feishu-cron-announce
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install bbj375767338-arch/feishu-cron-announce

ClawHub CLI

Package manager switcher

npx clawhub@latest install feishu-cron-announce
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
SKILL.md clearly describes using the OpenClaw CLI (openclaw cron ...) to schedule jobs and send announcements to Feishu; that aligns with the name/description. However the metadata did not declare the OpenClaw CLI as a required binary nor document that the agent/environment must be configured with Feishu channel credentials. The omission is an inconsistency (likely an oversight) but not evidence of malicious intent.
Instruction Scope
Instructions are narrowly scoped to constructing and running openclaw cron commands, checking runs, and interpreting delivery status. They do not instruct reading arbitrary files, other env vars, or contacting unrelated external endpoints.
Install Mechanism
Instruction-only skill with no install steps or code to run locally. This minimizes risk from the install mechanism.
!
Credentials
The skill requires access to a Feishu channel to deliver messages, but it declares no primary credential, required env vars, or config paths. Either the openclaw runtime provides Feishu credentials implicitly, or the skill omitted necessary credential requirements. Users should confirm where Feishu tokens/credentials are stored and whether granting this skill/agent access will expose those secrets.
Persistence & Privilege
The skill is not marked always:true and has no install behavior or config changes. It does allow autonomous invocation (disable-model-invocation false) which is the platform default; this is acceptable here but combine caution with credential access.
What to consider before installing
This skill is an instruction-only recipe for using the openclaw CLI to schedule cron jobs that announce to Feishu; that intent looks coherent. Before installing or enabling it, confirm two things: (1) that the OpenClaw CLI (openclaw) is actually available in the runtime where the agent will run — the SKILL metadata currently does not list it as a required binary, which is an omission; and (2) where Feishu credentials (or channel configuration) live and which component will use them to send messages. Verify that you trust the runtime/system that holds those credentials and that the agent's permission to post to Feishu is intentionally granted. If you cannot confirm the source of Feishu credentials (for example, access tokens or channel config in another skill or system setting), treat the omission as a red flag and request an updated skill manifest that declares required binaries and credentials. If you plan to use it, test in a restricted environment (non-production account) first and prefer using the recommended --session isolated flag as suggested by the SKILL.md.

Like a lobster shell, security has layers — review code before you run it.

announcevk973vzhtqc270txpg0sgx8f6fs85a66rcronvk973vzhtqc270txpg0sgx8f6fs85a66rfeishuvk973vzhtqc270txpg0sgx8f6fs85a66rlatestvk973vzhtqc270txpg0sgx8f6fs85a66rmonitoringvk973vzhtqc270txpg0sgx8f6fs85a66r
72downloads
0stars
1versions
Updated 5d ago
v1.0.0
MIT-0

飞书 Cron Announce 定时推送

核心要点

成功关键--session isolated + --announce + --channel feishu + --to + --tz Asia/Shanghai

标准命令模板

openclaw cron add \
  --name "<任务名>" \
  --cron "<cron表达式>" \
  --tz "Asia/Shanghai" \
  --session isolated \
  --message "<提示词:让 AI 检查什么并生成简短结论>" \
  --announce \
  --channel feishu \
  --to "<飞书用户 open_id>" \
  --best-effort-deliver

参数说明

参数必须说明
--session isolated隔离会话,announce 必须用 isolated
--tz "Asia/Shanghai"指定时区,避免 UTC 偏移
--announce开启结果投递
--channel feishu投递渠道为飞书
--to "<open_id>"飞书用户 open_id(格式:ou_xxx
--best-effort-deliver建议投递失败不影响任务状态
--account default⚠️多账号时必须指定;单账号可不写
--cron标准 cron 表达式(0 * * * * = 每小时整点)

常见错误

错误原因解决
deliveryStatus: "not-delivered"多账号未指定 --account添加 --account default
channel not found渠道名错误确认用 feishu
user not foundopen_id 格式错误ou_ 开头的用户 ID

验证命令

# 手动触发
openclaw cron run <job-id>

# 检查结果
openclaw cron runs --id <job-id>

# 成功标志
"delivered": true
"deliveryStatus": "delivered"

快速参考

  • 飞书 open_id:从消息元数据获取,格式 ou_xxx
  • cron 表达式:0 * * * * 每小时整点,0 9 * * * 每天 9 点
  • 任务执行成功 ≠ 投递成功,两者独立

Comments

Loading comments...