v1.0.1

飞书任务管理增强版

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 8:34 AM.

Analysis

This instruction-only skill appears purpose-aligned for managing Feishu tasks, with the main caution that it can change workspace task data when used.

GuidanceThis skill is reasonable for Feishu task management. Before installing or using it, make sure you are comfortable with the agent creating, updating, completing, and commenting on tasks in your Feishu workspace, and review any task IDs, assignees, followers, due dates, and comment content before write actions.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Tool Misuse and Exploitation

SeverityLowConfidenceHighStatusNote

SKILL.md

| 新建待办 | feishu_task_task | create | summary | ... | 完成任务 | feishu_task_task | patch | task_guid, completed_at | ... | **添加评论** | feishu_task_comment | create | task_guid, content |

The skill documents tool actions that create, update, complete, and comment on Feishu tasks. This matches the skill purpose, but these actions mutate workspace data.

User impactUsing the skill may create or modify tasks and comments in Feishu, so mistakes could affect shared work tracking.

RecommendationConfirm the specific task, list, assignee, due date, completion state, and comment text before asking the agent to perform write actions.

Permission boundary

Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.

Identity and Privilege Abuse

SeverityLowConfidenceHighStatusNote

SKILL.md

current_user_id 强烈建议：从消息上下文的 SenderId 获取（ou_...），工具会自动添加为 follower

The skill expects use of the sender's Feishu user ID and indicates the user may be added as a follower. This is purpose-aligned but uses workspace identity context.

User impactTasks created or updated through the skill may be associated with the sender's Feishu identity and may add the user as a follower.

RecommendationUse it only with the Feishu account/workspace where you intend these task changes to occur, and verify follower or member assignments for shared tasks.