feishu-doc-long-content

PassAudited by ClawScan on May 1, 2026.

Overview

This is a simple instruction-only skill for creating and writing Feishu Docs in small chunks, with no code or hidden install behavior shown.

This skill appears safe and coherent for its purpose. Before installing or using it, remember that it can guide the agent to create and write persistent Feishu documents; confirm the target account, document token, title, and content, especially if the content is private or business-sensitive.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If invoked on the wrong account or document token, the agent could create or overwrite content in an unintended Feishu document.

Why it was flagged

The skill instructs use of create, write, and read actions against Feishu Docs. This is exactly the stated purpose, but it can modify persistent documents in a user’s Feishu workspace.

Skill content
```json
{ "action": "create", "title": "笔记 Ch1" }
...
{ "action": "write", "doc_token": "ABC123", "content": "精简版内容..." }
...
{ "action": "read", "doc_token": "ABC123" }
```
Recommendation

Use it only when you want the agent to create or update Feishu Docs, and confirm the title, target document token, and content chunks before writing.

What this means

The agent may use existing Feishu document permissions to create, read, or write documents.

Why it was flagged

The skill depends on a Feishu document tool that presumably acts with whatever Feishu permissions are available to the user or agent. The artifact does not show credential theft or misuse, but the account authority is relevant to installation decisions.

Skill content
飞书文档工具 `feishu_doc` 的 `write` / `create` action
Recommendation

Ensure the Feishu integration has only the permissions needed for the intended workspace and documents.