feishu-emoji
v1.0.0在飞书聊天中发送内联表情包图片，需将图片下载到指定媒体目录并通过 message 工具调用发送。
⭐ 0· 180·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (send inline emoji to Feishu) matches what the files and SKILL.md do: discover image URLs, download them to the OpenClaw media directory, and invoke the 'message' tool to send media. The use of fabiaoqing.com and typical image CDNs is coherent with the stated source.
Instruction Scope
Runtime instructions and the python script focus on searching fabiaoqing.com, downloading image URLs with a Referer header, saving into /home/admin/.openclaw/media/inbound, then calling the message tool. This stays within the stated scope. Minor risk: the skill downloads arbitrary image URLs discovered on web pages — this can cause the agent environment to make outbound requests to third-party or internal hosts (SSRF/internal network access) if the scraped data contains unexpected URLs; this is an expected tradeoff for a downloader but worth noting.
Install Mechanism
No install specification (instruction-only) — the skill includes a small Python script and example curl commands but does not download or execute external installers. This is low-risk from an install perspective.
Credentials
The skill requests no secrets or privileged env vars. It writes into a media directory (/home/admin/.openclaw/media/inbound) which is consistent with its purpose. One minor inconsistency: SKILL.md claims 'dependencies: none (only need curl and message tool)', but the included script requires Python packages (requests, beautifulsoup4) listed in package.json — the environment must have those packages available for the script to work.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide configs. It only writes files to its media directory as expected for its function.
Assessment
This skill appears to do exactly what it says: search for emoji images on fabiaoqing.com (or use built-in CDN mappings), download them into the OpenClaw media directory, and call the platform 'message' tool to send inline images. Before installing, ensure: (1) the runtime has Python and the required packages (requests, beautifulsoup4) or adjust the SKILL.md to install them; (2) you are comfortable with the skill writing files to /home/admin/.openclaw/media/inbound (or set OPENCLAW_MEDIA_DIR to a different directory); (3) allowing outbound HTTP(S) requests is acceptable — the skill will fetch external image URLs and could, in edge cases, reach internal endpoints if the scraped page contains such links (consider URL validation/whitelisting); (4) you’re aware of copyright and usage restrictions for downloaded images. If you need tighter security, run the skill in a sandboxed environment, add URL validation and size limits to the downloader, and ensure the 'message' tool is the official OpenClaw integration rather than an unexpected binary.Like a lobster shell, security has layers — review code before you run it.
emojivk97asmhy6yjffr0zac0sy6vqqd830d90feishuvk97asmhy6yjffr0zac0sy6vqqd830d90latestvk97asmhy6yjffr0zac0sy6vqqd830d90
License
MIT-0
Free to use, modify, and redistribute. No attribution required.