Article to Feishu

ReviewAudited by ClawScan on May 1, 2026.

Overview

The skill’s behavior matches its stated purpose, but it relies on external reader/Feishu services and local shell scripts that users should understand before use.

This skill appears coherent and purpose-aligned. Before installing, be comfortable with it using your Feishu document tools, sending article URLs to Jina Reader for fetching, and temporarily saving downloaded images locally.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

When used, the agent can create or append to Feishu documents through the user’s Feishu integration.

Why it was flagged

The workflow uses Feishu tools to create and modify cloud documents and insert uploaded media, which requires delegated Feishu account authority.

Skill content
feishu_create_doc 创建文档 ... feishu_update_doc mode=append 追加文字 ... feishu_doc_media action=insert 插入图片
Recommendation

Use only if you intend to grant Feishu document write access; confirm the destination document and review Feishu sharing permissions.

What this means

Article URLs, and potentially article content, may be visible to the external reader service during conversion.

Why it was flagged

The helper sends the article URL through Jina AI Reader, an external provider, to retrieve article content.

Skill content
JINA_API="https://r.jina.ai/" ... curl -sL "$JINA_URL"
Recommendation

Avoid using this skill for private, internal, tokenized, or otherwise sensitive URLs unless you are comfortable sending them to the reader service.

What this means

The skill can save downloaded images locally before uploading them to Feishu.

Why it was flagged

The script creates a local output directory and downloads external images into it, which is expected for this skill but still performs local file writes and network retrieval.

Skill content
mkdir -p "$OUTPUT_DIR" ... curl -sL -w "%{http_code}" -H "Referer: $REFERER" "$IMG_URL" -o "$FILEPATH"
Recommendation

Keep output paths scoped to temporary or user-controlled directories, and review downloaded files if the source site is untrusted.

What this means

The skill may rely on local command-line tools that are not declared in the metadata.

Why it was flagged

The registry metadata does not declare runtime dependencies even though the documented workflow invokes included shell scripts.

Skill content
No install spec — this is an instruction-only skill. ... Required binaries (all must exist): none
Recommendation

Review the included scripts before use and ensure required local utilities such as bash and curl are available from trusted system paths.