Feishu Calendar Intelligent Scheduler

飞书智能日历调度器 - 自动推荐最佳会议时间，批量管理日程，生成会议报表

Security Scan

The skill's files and runtime instructions contain inconsistencies and some risky artifacts (hard-coded API token, license key handling, publisher tooling) that don't clearly match the described Feishu-integration purpose — review before installing or running anything.

Purpose & Capability

The SKILL.md claims full Feishu calendar integration (create meetings, send invites, API access) and its metadata declares required 'feishu' tools, but the shipped runtime code primarily implements a local rule-based recommendation algorithm and packaging/publishing/license utilities — there are no direct Feishu API calls in recommend.py or other user-facing runtime scripts. Declared integration requirements (feishu_calendar_event / feishu_calendar_calendar) are not reflected in required environment variables or concrete API usage, indicating a mismatch between claimed capabilities and the actual code.

Instruction Scope

SKILL.md instructs users to install and run commands that imply integration with Feishu, but runtime instructions do not request or show how Feishu credentials are provided; the install script copies files into the user's home (~/.openclaw/feishu-calendar-scheduler) and registers command aliases. Additional scripts (api_publisher.py, packager.py, license_manager.py) perform actions outside the core scheduling purpose (publishing packages, generating licenses) and could be run by a user or operator unintentionally. The SKILL.md metadata also contains a 'requires.tools' entry not declared elsewhere, creating ambiguity about what the agent will actually call at runtime.

Install Mechanism

There is no registry install spec, but an included install.sh performs local installation: checks python/openclaw, installs pytz, copies scripts to $HOME/.openclaw/feishu-calendar-scheduler, creates config and command aliases, and symlinks the current directory into ~/.openclaw/skills. This is a standard local install pattern but does write files into the user's home and creates symlinks — do not run blindly in an untrusted directory. The install script does not download code from remote URLs (lower risk), but it executes filesystem modifications.

Credentials

The package declares no required env vars but expects a configured Feishu plugin (external dependency) — this is inconsistent. More importantly, scripts/api_publisher.py embeds a hard-coded API token constant (TOKEN = "clh_..."), which is unexpected for a scheduling skill and could be a leaked or placeholder secret; this file will upload local files to an external API when executed. The license manager uses base64/HMAC and persists a secret to a local '.license_secret' file by default; the license utilities return the secret_key in generate_license (the code comments warn not to do so), which is risky if used improperly. Overall, credential handling and the presence of a hard-coded token are disproportionate to the simple scheduling claim.

Persistence & Privilege

The skill is not 'always: true' (no elevated platform privilege). The installer writes to ~/.openclaw, registers command aliases, and may create a symlink in ~/.openclaw/skills — expected for a third-party skill. It does not modify other skills' config. However, because installation modifies user home and registers commands, users should be aware that files are persisted and some scripts (license manager, publisher) can be executed later.

Scan Findings in Context

[base64-block] unexpected: A base64-like block was flagged by the pre-scan. The code does use base64 to encode license payloads in scripts/license_manager.py (expected for a license system), but the scanner reported the pattern in SKILL.md content — that is unexpected for a plain skill metadata file and could be noise or false positive. Regardless, base64 usage in license handling is reasonable but should be reviewed because it is related to license keys stored/handled by the package.

What to consider before installing

What to do before installing or running this skill: - Don't run install.sh or any script without inspection and, ideally, in a sandboxed environment (container or VM). The installer writes to $HOME/.openclaw and creates command aliases. - Confirm Feishu integration: the SKILL.md promises Feishu calendar actions, but the included runtime code (recommend.py) only implements a local recommendation algorithm and does not call Feishu APIs. If you need actual Feishu operations (creating meetings, sending invites), ask the author for the integration code or for explicit instructions on how credentials are provided (the skill expects a separate OpenClaw Feishu plugin). - Inspect and remove/rotate secrets: scripts/api_publisher.py contains a hard-coded TOKEN constant. Treat this as suspicious — do not run this publisher script until you verify the token's origin and intent. The license manager writes/reads a '.license_secret' file and returns the secret in some outputs; ensure secrets are stored securely and not published accidentally. - Avoid running the publisher/packager utilities unless you understand what they upload. api_publisher.py can upload local files to an external endpoint (clawhub.ai) using the embedded token — this could exfiltrate files from the skill directory if executed. - If you intend to use the license system, initialize and inspect the secret key handling (run license_manager init in a controlled directory), and do not allow the secret to be committed or uploaded. - If uncertain, request the upstream/source authorship and verification (the registry 'source' is unknown). Prefer skills with clear source repositories and no embedded tokens. If you proceed, run the code in an isolated environment and review all files that will be written to your home directory.

飞书智能日历调度器

为企业提供智能会议时间推荐和批量日程管理服务。

功能特点

🕒 智能时间推荐

• 基于规则的时间推荐算法
• 避开已知繁忙时段
• 考虑时区和工作日设置
• 多参会人时间协调

📊 批量会议管理

• 批量创建、修改、取消会议
• 自动发送会议邀请
• 参会人状态跟踪
• 会议模板管理

📈 报表分析

• 会议参与率统计
• 时间利用率分析
• 效率改进建议
• 导出 Excel/PDF 报告

🔗 集成扩展

• 与飞书文档、多维表格集成
• 支持自定义工作流
• API 接口调用
• 第三方系统集成

安装使用

安装要求

• OpenClaw 已配置飞书插件
• 用户拥有飞书日历访问权限

快速开始

# 通过 ClawHub 安装
clawhub install feishu-calendar-scheduler

# 或手动安装到 skills 目录

基础使用

# 推荐会议时间
openclaw skill feishu-calendar-scheduler recommend \
  --start "2026-03-17T09:00:00+08:00" \
  --end "2026-03-17T18:00:00+08:00" \
  --duration 60 \
  --attendees "ou_xxx,ou_yyy"

# 批量创建会议
openclaw skill feishu-calendar-scheduler batch-create \
  --template "周会模板" \
  --start-date "2026-03-17" \
  --weeks 4 \
  --attendees "团队全员"

# 生成会议报表
openclaw skill feishu-calendar-scheduler report \
  --month 2026-03 \
  --output excel

定价策略

免费试用

• 7天免费试用期
• 最多10个会议
• 基础功能

专业版 ¥99/月

• 无限会议数量
• 所有智能功能
• 高级报表
• 技术支持

企业版 ¥499/月

• 多团队管理
• API 访问权限
• 定制化开发
• 优先支持

技术架构

• 核心引擎：基于规则的时间调度算法
• 数据存储：飞书多维表格 + 本地缓存
• 用户界面：命令行 + 飞书机器人
• 部署方式：OpenClaw 插件形式

开发计划

v1.0（当前）

• 基础时间推荐
• 简单会议管理
• 命令行界面

v1.1（1个月后）

• 飞书机器人集成
• 图形化配置界面
• 更多报表类型

v1.2（2个月后）

• API 开放接口
• 第三方系统集成
• 高级算法优化

支持与帮助

• 文档：https://docs.clawhub.com/skills/feishu-calendar-scheduler
• 支持：[e-mail]
• 社区：https://discord.com/invite/clawd

许可证

商业许可证 - 需要购买订阅后使用

---

开始7天免费试用：安装后自动开始试用期，试用期满后需要购买订阅。