Feishu Bitable Merger

Feishu Bitable Merger - Merge multiple Feishu bitable data into one table

Security Scan

The skill's code, instructions, and requested permissions align with its stated purpose of merging Feishu Bitable data; nothing in the package indicates behavior outside that scope.

Purpose & Capability

Name/description say 'merge Feishu bitable' and the code implements URL parsing, field listing, record listing, field mapping, deduplication, and batch writes to a target table. The required Feishu API scopes listed in SKILL.md match the operations performed (read/write app and records).

Instruction Scope

SKILL.md instructs use of the openclaw CLI and documents required Feishu permissions; it does not ask the agent to read unrelated files or environment variables or exfiltrate data to external endpoints beyond Feishu. The runtime code uses OpenClaw tool calls to obtain metadata, list fields/records, and create records — consistent with the described functionality.

Install Mechanism

There is no install spec in the registry (instruction-only), which is low risk. The package includes code (index.js) and package.json with a single dependency (commander) — reasonable for a CLI. The registry not declaring an install step means the runtime will rely on the agent environment's ability to execute the included code; that's not harmful but worth noting.

Credentials

The SKILL.md correctly lists Feishu API scopes required for reading/writing bitable data. The registry metadata does not declare any environment variables or a primary credential; the code delegates auth to OpenClaw tools (feishu_bitable_*), so missing declared env vars is explainable but the skill assumes the agent/tooling provides Feishu credentials. No unrelated secrets or env paths are requested.

Persistence & Privilege

The skill does not request always:true or other elevated persistence. It is user-invocable and can be invoked autonomously (platform default). It does not modify other skills or system-wide settings.

Assessment

This skill appears to do what it says: read multiple Feishu Bitable tables and merge records into a target table. Before installing, confirm you trust the skill source (owner is unknown), and ensure your OpenClaw agent or environment has the Feishu app credentials with the listed scopes (bitable:app:read/write, bitable:record:read/write). Note the code uses local shell execution (execSync) to call OpenClaw tools — this is expected here but you should only run third-party CLI code you trust. Test on non-production/sample tables first to verify field mappings and deduplication behave as you expect.

Merge multiple Feishu bitable data into one target table, features:

• Auto match same field names
• Preserve original data format
• Support incremental merge
• Support field mapping configuration
• Support deduplication after merge

Usage

# Merge multiple tables to target
openclaw feishu-bitable-merger merge --source "https://example1.com/base/xxx" "https://example2.com/base/xxx" --target "https://example.com/base/yyy"

# Merge with field mapping
openclaw feishu-bitable-merger merge --source "source1" "source2" --target "target" --map "oldField:newField"

Configuration

Required Feishu API permissions:

• bitable:app:read
• bitable:app:write
• bitable:record:read
• bitable:record:write