OpenClaw飞书日历管理

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill is coherently for Feishu calendar management, but it recommends giving meeting invitees broad edit permissions by default.

Install only if you are comfortable with the agent managing Feishu calendar events. Pay special attention to attendee permissions: avoid giving all invitees edit/manage rights unless that is explicitly intended.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If invoked, the skill can make visible changes to Feishu calendar events and attendee lists.

Why it was flagged

The skill documents mutating calendar actions such as creating events, changing event times, and removing attendees. These are purpose-aligned for a calendar manager, but they can affect real calendars and notifications.

Skill content
| 创建会议 | feishu_calendar_event | create | ... | 改日程时间 | feishu_calendar_event | patch | ... | 删除参会人 | feishu_calendar_event_attendee | batch_delete |
Recommendation

Review event details, attendees, and intended changes before allowing create, patch, reply, invite, or attendee-removal actions.

What this means

People invited to a meeting may be able to change the event or participant list, potentially causing unintended schedule or access changes.

Why it was flagged

The documented default/recommended attendee permission grants invitees the ability to edit the event and manage participants, which is broader than necessary for many meeting invitations.

Skill content
工具已默认设置 `attendee_ability: "can_modify_event"`,参会人可以编辑日程和管理参与者。 ... `can_modify_event` | 可编辑日程(推荐)
Recommendation

Use least-privilege attendee permissions such as viewing or inviting only when appropriate, and grant can_modify_event only when the user explicitly wants invitees to edit the event.