Feishu Bot Chat
Security checks across malware telemetry and agentic risk
Overview
It appears to do what it claims—coordinate Feishu/Lark bots in group chats—without unrelated credentials or downloads, but it does run plugin code that uses existing Feishu app credentials.
Before installing, be comfortable with the plugin reading your existing OpenClaw Feishu account configuration, using Feishu appId/appSecret values to request tenant tokens, reading group bot membership, and injecting available bot names/IDs into agent prompts. Also verify the full repository/source before production use because the provided index.js content is truncated here, and make sure the Feishu app permissions are limited to what this collaboration feature needs.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
No VirusTotal findings