yuqing-bitable-and-label

This skill appears to implement the claimed sync-and-label workflow and requires Feishu app credentials and a XiaoAi token — those are expected. Things to consider before installing: - Do NOT set OPENAI_API_KEY / OPENAI_BASE_URL / OPENAI_MODEL unless you trust the external LLM gateway: if provided the skill will send record content to that gateway (default base is api.openai.com), but the SKILL.md did not declare network permissions for that. That mismatch can result in unexpected outbound data transfer. - The skill writes logs, a cache directory, and lock/status files inside its own directory and the provided shell helpers may edit the local .env (monitor.sh/sync.sh include auto-fix logic). Review any .env you place in the skill directory so it does not contain unrelated secrets. - If you plan to run this in production, run it in an isolated environment or staging workspace first and inspect outputs (sync.log, error.log, .sync_status.json). Confirm the run_only network hosts are acceptable. - If you need labeling without sending data to third-party LLMs, verify the labeling mode will accept model outputs via stdin (the code supports a stdin/OpenClaw mode) and avoid supplying OPENAI_* env vars. - If you want to be safer, audit the run_once functions in excel_to_feishu_bitable.py and bitable_labeling_skill.py (they perform HTTP calls and modify bitable fields) to confirm there are no additional unexpected endpoints or behaviors.