Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Feishu Bot Config Helper

辅助配置飞书机器人名称、应用凭证和大模型,自动匹配技能并生成本地及飞书文档。

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 27 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill's name, README and SKILL.md align with the provided scripts: configuring Feishu App ID/Secret, choosing models/agents, matching skills, and generating local/Feishu docs. However, the repository also includes optional publishing tooling (auto-create-github.sh / publish instructions) which is outside the core runtime purpose of creating bot configs and docs; that extra capability is plausible (for author workflow) but not necessary for the stated end-user configuration purpose.
Instruction Scope
SKILL.md instructs running the included shell scripts and entering App ID / App Secret interactively (expected). It does not instruct any covert data exfiltration. But auxiliary instructions (PUBLISH_INSTRUCTIONS.md and scripts/auto-create-github.sh) ask the user to supply a GITHUB_TOKEN and will call GitHub APIs and push code — functionality not declared in the top-level requirements and not required for configuring the Feishu bot itself.
Install Mechanism
No packaged binary installs or opaque downloads in the provided files. install.sh and INSTALL.md use git clone/git and reference GitHub raw URLs; cloning from a GitHub repo is a common, traceable install method. There is no evidence of downloading/extracting archives from arbitrary personal servers in the included files.
!
Credentials
Registry metadata declares no required env vars, but the package contains scripts that require sensitive credentials if used: scripts/auto-create-github.sh and PUBLISH_INSTRUCTIONS.md require GITHUB_TOKEN to create/push a GitHub repo. The core configure scripts do request App ID and App Secret interactively and then write them in plaintext to local JSON/MD files — expected for a config helper, but a privacy/security consideration. The undeclared need for GITHUB_TOKEN and the global git credential changes (see below) are disproportionate to the basic Feishu-configuration flow unless the user intentionally runs the publishing scripts.
Persistence & Privilege
The skill does not set always:true and doesn't auto-enable itself. However, the auto-publish script modifies global git configuration (git config --global user.name/email and sets credential.helper store), which is a system-wide change and could cause credentials to be stored on disk. The rest of the scripts write configuration files under the user's ~/.openclaw workspace (expected for this skill).
What to consider before installing
What to check before installing or running this skill: - The core functionality (configure-bot.sh, generate-md-doc.sh, match-skills.sh) is coherent with a Feishu bot config helper: it interactively asks for App ID and App Secret and writes local JSON/MD files. Expect your App Secret to be stored in plaintext under ~/.openclaw/workspace-main/bot-configs. - Publishing scripts are optional but powerful: scripts/auto-create-github.sh and PUBLISH_INSTRUCTIONS.md request a GITHUB_TOKEN and will call the GitHub API and attempt to push the repository. These scripts also run git config --global to set user.name/user.email and configure credential.helper store — this modifies your global git settings and can cause credentials to be stored on disk. Do not run these publish scripts unless you understand and accept those side-effects. - The package metadata does not declare GITHUB_TOKEN or any required env vars, but the publish flow requires it. Treat any prompt for tokens (GitHub or others) with caution and prefer running publish steps manually after review. - If you only want the bot configured, run scripts/configure-bot.sh and inspect the generated files. Consider: - Running the scripts in a controlled environment (VM or throwaway account) first. - Not providing long-lived tokens; rotate App Secret or tokens after use. - Inspecting/cleaning any stored credentials (e.g., ~/.git-credentials) if you run the publish scripts. - Manually edit openclaw.json as instructed (the scripts do not appear to modify it automatically), and back it up before changes. - If you need higher assurance, ask the skill author why global git config changes are necessary and request a version of the publish script that does not alter system-wide git settings or that uses ephemeral credential storage.

Like a lobster shell, security has layers — review code before you run it.

Current versionv0.1.1
Download zip
latestvk979tyjgzgdqzrkv43vskcxyy9831nbr

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

🤖 飞书机器人配置助手 Skill

配置飞书机器人名称、应用凭证(App ID、App Secret)、大模型名称,自动匹配技能,生成本地 md 文档和飞书文档

版本:v1.0.0
作者:OpenClaw 社区
创建时间:2026-03-16
技能类型:配置助手


📦 技能介绍

核心功能

  • ✅ 配置飞书机器人名称
  • ✅ 配置应用凭证(App ID、App Secret)
  • ✅ 配置大模型名称
  • ✅ 自动匹配推荐技能
  • ✅ 生成本地 md 文档
  • ✅ 生成飞书文档

支持的 Agent 类型

Agent职责默认模型推荐技能
Main主助理doubaoelite-longterm-memory, content-collector
Dev开发助手doubao-procode-analyzer, debug-helper
Content内容创作doubaoarticle-writer, ai-daily-news
Ops运维监控doubaoserver-monitor, log-analyzer
Law法务合规doubao-procontract-reviewer, legal-advisor
Finance财务分析doubao-profinancial-analyzer, budget-planner

🚀 安装方式

方式一:对话安装

在 OpenClaw 对话中发送:

安装 feishu-bot-config-helper

方式二:手动安装

# 1. 创建技能目录
mkdir -p ~/.openclaw/workspace/skills/feishu-bot-config-helper

# 2. 复制技能文件
cp -r /path/to/skill/* ~/.openclaw/workspace/skills/feishu-bot-config-helper/

# 3. 添加执行权限
chmod +x ~/.openclaw/workspace/skills/feishu-bot-config-helper/scripts/*.sh

# 4. 重启 Gateway
openclaw gateway restart

⚙️ 使用方式

方式一:对话配置(推荐)

在飞书对话中对龙虾说:

配置飞书机器人

机器人名称:我的 AI 助手团队
飞书应用凭证:
- App ID: cli_xxx
- App Secret: xxx
大模型名称:doubao

创建以下 Agent:
- Dev Agent(开发助手)
- Content Agent(内容创作)
- Finance Agent(财务分析)

龙虾会自动:

  1. 生成配置文件(JSON 格式)
  2. 生成本地 md 文档
  3. 创建飞书文档

方式二:使用配置脚本

# 运行配置脚本
cd ~/.openclaw/workspace/skills/feishu-bot-config-helper
bash scripts/configure-bot.sh

按提示输入:

  1. 飞书机器人名称
  2. App ID 和 App Secret
  3. 大模型名称
  4. 选择要创建的 Agent 类型

📋 配置流程

步骤 1:输入基本信息

请输入飞书机器人名称:我的 AI 助手团队
请输入 App ID: cli_xxx
请输入 App Secret: xxx
请输入大模型名称(默认 doubao):doubao

步骤 2:选择 Agent 类型

请选择要创建的 Agent(输入序号,多个用逗号分隔):
  [1] Main - 主助理
  [2] Dev - 开发助手
  [3] Content - 内容创作
  [4] Ops - 运维监控
  [5] Law - 法务合规
  [6] Finance - 财务分析

选择:2,3,6

步骤 3:自动匹配技能

系统自动为每个 Agent 匹配推荐技能:

选择的 Agent自动匹配技能
Devcode-analyzer, debug-helper
Contentarticle-writer, ai-daily-news
Financefinancial-analyzer, budget-planner

步骤 4:生成文档

系统自动生成:

  1. 配置文件bot-config_TIMESTAMP.json
  2. 本地文档bot-setup_TIMESTAMP.md
  3. 飞书文档:自动创建云文档

📁 生成的文档

1. 配置文件(JSON)

位置:~/.openclaw/workspace-main/bot-configs/bot-config_TIMESTAMP.json

{
  "robot_name": "我的 AI 助手团队",
  "app_id": "cli_xxx",
  "app_secret": "xxx",
  "model": "doubao",
  "created_at": "2026-03-16T15:30:00+08:00",
  "agents": [
    {
      "name": "Dev Agent",
      "role": "代码编写、Debug、技术答疑",
      "model": "doubao-pro",
      "skills": ["code-analyzer", "debug-helper"],
      "keywords": "代码、编程、debug、开发、技术、api"
    },
    {
      "name": "Content Agent",
      "role": "文章写作、报告生成、营销文案",
      "model": "doubao",
      "skills": ["article-writer", "ai-daily-news"],
      "keywords": "写文章、报告、文案、内容、创作、日报"
    },
    {
      "name": "Finance Agent",
      "role": "财务报表、数据分析、预算规划",
      "model": "doubao-pro",
      "skills": ["financial-analyzer", "budget-planner"],
      "keywords": "财务、报表、数据、预算、分析、支出"
    }
  ]
}

2. 本地文档(Markdown)

位置:~/.openclaw/workspace-main/bot-configs/bot-setup_TIMESTAMP.md

# 🤖 飞书机器人配置文档

_配置时间:2026-03-16T15:30:00+08:00_

## 📋 基本信息

| 配置项 | 值 |
|--------|-----|
| **机器人名称** | 我的 AI 助手团队 |
| **飞书 App ID** | cli_xxx |
| **大模型** | doubao |
| **Agent 数量** | 3 |

## 🤖 已创建的 Agent

### 1. Dev Agent - 开发助手

- **职责**:代码编写、Debug、技术答疑
- **模型**:doubao-pro
- **技能**:code-analyzer, debug-helper
- **关键词**:代码、编程、debug、开发、技术、api

### 2. Content Agent - 内容创作

- **职责**:文章写作、报告生成、营销文案
- **模型**:doubao
- **技能**:article-writer, ai-daily-news
- **关键词**:写文章、报告、文案、内容、创作、日报

### 3. Finance Agent - 财务分析

- **职责**:财务报表、数据分析、预算规划
- **模型**:doubao-pro
- **技能**:financial-analyzer, budget-planner
- **关键词**:财务、报表、数据、预算、分析、支出

## 🔧 下一步操作

1. 在飞书开放平台配置应用权限
2. 应用配置到 openclaw.json
3. 重启 Gateway
4. 测试验证

3. 飞书文档

自动创建飞书云文档,包含:

  • 配置信息汇总
  • Agent 列表和职责
  • 技能匹配结果
  • 路由规则
  • 使用指南
  • 参考资源

🔧 配置示例

示例 1:个人用户

配置飞书机器人

机器人名称:我的私人助理
飞书应用凭证:
- App ID: cli_personal_xxx
- App Secret: personal_xxx
大模型名称:doubao

创建 Agent:
- Main(主助理)
- Content(内容创作)

示例 2:企业用户

配置飞书机器人

机器人名称:企业 AI 助手团队
飞书应用凭证:
- App ID: cli_enterprise_xxx
- App Secret: enterprise_xxx
大模型名称:doubao-pro

创建 Agent:
- Main(主助理)
- Dev(开发助手)
- Ops(运维监控)
- Law(法务合规)
- Finance(财务分析)

📁 文件结构

feishu-bot-config-helper/
├── SKILL.md                    # 技能描述
├── _meta.json                  # 元数据
├── README.md                   # 使用说明
├── scripts/
│   ├── configure-bot.sh        # 配置脚本
│   ├── generate-md-doc.sh      # MD 文档生成脚本
│   ├── generate-feishu-doc.sh  # 飞书文档生成脚本
│   └── match-skills.sh         # 技能匹配脚本
└── output/                     # 生成的文件(运行时创建)
    ├── bot-config_TIMESTAMP.json
    └── bot-setup_TIMESTAMP.md

🐛 常见问题

Q1: 配置失败?

原因

  1. App ID 或 Secret 错误
  2. 飞书权限未开通
  3. 网络问题

解决方案

  1. 检查凭证是否正确
  2. 确认飞书权限已开通
  3. 检查网络连接

Q2: 技能匹配失败?

解决方案

  1. 检查技能是否已安装
  2. 手动指定技能名称
  3. 查看技能列表

Q3: 飞书文档创建失败?

原因

  1. 飞书授权未完成
  2. 文档权限未开通

解决方案

  1. 完成飞书授权
  2. 开通文档权限
  3. 重试创建

Q4: 本地文档未生成?

解决方案

  1. 检查输出目录权限
  2. 查看脚本执行日志
  3. 手动运行配置脚本

📞 参考资源

资源链接
OpenClaw 文档https://docs.openclaw.ai
飞书开放平台https://open.feishu.cn
Clawhub 技能站https://clawhub.ai/
多 Agent 部署手册https://www.feishu.cn/docx/VXuIdCLcJofe8WxOqFucoiwJnKd

📝 更新日志

v1.0.0 (2026-03-16)

  • ✅ 初始版本发布
  • ✅ 支持飞书机器人名称配置
  • ✅ 支持应用凭证配置
  • ✅ 支持大模型名称配置
  • ✅ 自动匹配技能
  • ✅ 生成本地 md 文档
  • ✅ 生成飞书文档
  • ✅ 支持 6 种 Agent 类型

👥 贡献者

  • 作者:OpenClaw 社区
  • 基于:多 Agent 飞书机器人系统部署手册
  • 维护:OpenClaw 社区团队

📄 许可证

MIT License - 开源免费使用


一键配置飞书机器人,让 OpenClaw 拥有专业化分身! 🦞🤖

最后更新:2026-03-16

Files

14 total
Select a file
Select a file to preview.

Comments

Loading comments…