飞书任务智能体

• Verdict: Pass
• Analyzed: Apr 30, 2026, 6:21 AM
• Findings: 0
• Version: 1.0.0
• Hash: 3d3d66969f1a5fee92c24c217f1c202f55fb59d8b52fbbbba5359b8cc0e805d4
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: feishu-task-agent-alpha Version: 1.0.0 The skill bundle implements a Feishu task management system with high-privilege capabilities, including reading the OpenClaw configuration file (~/.openclaw/openclaw.json) in scripts/resolve_creator_members.py and scanning the local filesystem for journal files in scripts/build_daily_json.py. Most significantly, workflows/reg.md instructs the agent to modify its own core instructions (AGENTS.md) to force a 'routing hard rule' and establishes persistence through openclaw cron jobs. While these behaviors are documented as part of the 'registration' process, the use of self-modifying prompts and hidden instructions in cron messages (references/task-decision-rules.md) creates a significant risk of behavioral hijacking.