Feishu Doc Exporter

Feishu Document Exporter - Batch export Feishu docs to markdown/PDF

Security Scan

The skill's code and instructions are coherent with its stated purpose (exporting Feishu docs); it calls other OpenClaw tools to access Feishu data but does not request unrelated credentials or perform unexpected actions.

Purpose & Capability

Name, description, README, SKILL.md and index.js all align: the tool lists/reads Feishu docs and writes markdown files. The SKILL.md's stated required Feishu API permissions (doc/drive read scopes) match the declared purpose. The implementation delegates Feishu access to 'openclaw tool call' for feishu_doc and feishu_drive, which is a reasonable design choice for an OpenClaw skill.

Instruction Scope

SKILL.md usage examples are narrowly scoped to export/list commands. The runtime code executes shell commands via child_process.execSync to call 'openclaw tool call' — this is expected for delegating to other OpenClaw tools, but it means the skill relies on those external tools' behavior. The SKILL.md does not explicitly state this delegation, so reviewers should be aware that runtime calls go through the OpenClaw CLI.

Install Mechanism

There is no install spec; the package includes source files and a package.json (commander dependency). Nothing in the skill attempts to download or extract remote archives or install arbitrary binaries during install.

Credentials

The skill requests no environment variables itself, and SKILL.md lists the Feishu API scopes that are needed. In practice the skill delegates API access to feishu_doc and feishu_drive OpenClaw tools, so credentials and tokens will be managed by those tools rather than by this skill. This is proportionate but reviewers should verify the other tools' credential handling and scope.

Persistence & Privilege

The skill is not always-enabled, is user-invocable, and does not attempt to modify agent configuration or persist auth outside its normal operation. It writes exported files to the user-specified output directory only.

Assessment

This skill appears to do what it claims: export Feishu docs to markdown. Important notes before installing: (1) The skill delegates Feishu access by running 'openclaw tool call' for feishu_doc and feishu_drive — review those tools to confirm they are trusted and hold the expected Feishu credentials with only the listed read scopes. (2) The JS entrypoint uses execSync (shell execution) to invoke the OpenClaw CLI; ensure the OpenClaw CLI on your system is legitimate and not replaced. (3) The skill will write files to the output path you provide — run it first on a small test folder and in an isolated environment if you are cautious. (4) Verify you are comfortable with the Feishu app permissions (doc:document:read, drive:folder:read, drive:file:read). If you need higher assurance, inspect the implementations of the feishu_doc and feishu_drive tools and confirm where and how API tokens are stored/used.

Feishu Document Exporter

Batch export Feishu documents to markdown or PDF format, features:

• Batch export entire folders
• Preserve document structure and formatting
• Export images as local files
• Support nested folder hierarchy
• Generate table of contents
• Support incremental export

Usage

# Export single document to markdown
openclaw feishu-doc-exporter export --url "https://example.com/docx/xxx" --format markdown --output ./export

# Export entire folder recursively
openclaw feishu-doc-exporter export --folder "folder_token" --format pdf --output ./export --recursive

# List all documents in a folder
openclaw feishu-doc-exporter list --folder "folder_token"

Configuration

Required Feishu API permissions:

• doc:document:read
• drive:folder:read
• drive:file:read