Feishu Chat

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is a coherent Feishu group-chat guide, but users should be aware it guides posting to group chats, changing Feishu render settings, and storing member IDs.

Install this if you want OpenClaw to help format and send Feishu group messages. Before use, make sure the Feishu bot/account is appropriately scoped, confirm group targets and message content before posting, and store member IDs only when necessary.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may send visible messages or @ mentions in a Feishu group if the user directs it to use this workflow.

Why it was flagged

The skill documents use of the message tool to send content into a Feishu target; this is expected for the skill, but it is still external group-chat posting authority.

Skill content
message({ action: "send", channel: "feishu", target: "oc_xxx", message: "Plain text content" })
Recommendation

Confirm the destination group, mentioned users, and final message content before sending, especially in work or public channels.

NoteHigh Confidence
ASI08: Cascading Failures
What this means

A configuration mistake could change message rendering for all Feishu usage through that OpenClaw gateway.

Why it was flagged

The setup changes a Feishu channel-level render setting and restarts the gateway, which may affect multiple Feishu conversations rather than just one message.

Skill content
openclaw config set channels.feishu.renderMode "card"; openclaw gateway restart
Recommendation

Apply the renderMode change intentionally, verify it with the provided config check, and restart the gateway only when acceptable.

What this means

Actions taken through the skill may appear from the connected bot or account in Feishu groups.

Why it was flagged

The skill assumes an existing Feishu-connected OpenClaw identity, so messages and mentions operate through that delegated chat access.

Skill content
Prerequisites: In a Feishu group - OpenClaw connected to Feishu
Recommendation

Use a Feishu bot/account with only the group access it needs and review its permissions outside the skill.

What this means

Member identifiers could persist beyond the immediate chat task and be reused in future mentions.

Why it was flagged

The skill recommends persisting Feishu member identifiers and bot app IDs for later reuse; this is purpose-aligned but creates stored identity context.

Skill content
Store member info in memory file: ... - nickname1: `ou_xxx` ... - bot1: `cli_xxx`
Recommendation

Store only the IDs needed for the relevant group, keep the memory file private, and remove stale or unnecessary entries.