Feishu New Chat

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent and purpose-aligned, but it can send real Feishu messages as the user and optionally copy prior context into a group topic.

This skill appears safe to install if you want Feishu topic creation, but treat it like a posting assistant: verify the Feishu group, the message text, any @mentions, and any carried-over context before sending.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may post messages into a Feishu group when you ask it to create a topic.

Why it was flagged

The skill instructs the agent to use Feishu messaging tools to create a real top-level topic message. This is purpose-aligned, but it is a mutating action in a third-party communication system.

Skill content
Use `feishu_im_user_message.send` ... The returned `message_id` is the topic root.
Recommendation

Before invoking it, confirm the destination group and the exact message content, especially for work or shared groups.

What this means

Messages created through this skill may appear as if you sent them in Feishu.

Why it was flagged

The skill depends on user-authenticated Feishu messaging and sends as the user. This is expected for the integration, but it means the skill acts with the user's Feishu posting authority.

Skill content
User-auth Feishu messaging is available for `feishu_im_user_message`.
Recommendation

Only use this skill with Feishu authorization you trust, and review requests that post to shared or sensitive groups.

What this means

Parts of your previous conversation could be included in a Feishu topic if you ask the agent to carry context over.

Why it was flagged

The skill can carry prior conversation context into a new Feishu topic. The instructions limit this to minimal relevant context, but prior chat content may still be shared into a persistent group thread.

Skill content
carry over only the minimum relevant context
Recommendation

Review any generated context summary before sending it to a group, and avoid carrying over confidential information unless intended.