Feishu Drive

Manage Feishu cloud storage by listing, creating, moving, and deleting files and folders with your Feishu account.

Security Scan

The skill claims to manage Feishu cloud storage but provides no clear authentication or credential requirements and the runtime instructions are underspecified, creating an incoherence between purpose and what's required.

Purpose & Capability

The skill's name/description promise full Feishu Drive management, which normally requires API credentials (OAuth token or API key). However the skill declares no required environment variables, no primary credential, and no config paths. That mismatch suggests either the skill relies on an out-of-band platform connector (not documented) or it cannot actually perform its stated purpose without hidden credentials.

Instruction Scope

SKILL.md stays on-topic (list/create/move/delete) and does not instruct reading unrelated files or env vars. However the instructions are minimal and do not explain how authentication is obtained/granted, what permissions are needed, or how errors and warnings are surfaced — leaving operational behavior ambiguous.

Install Mechanism

This is an instruction-only skill with no install spec and no code files, so it does not write new binaries to disk or fetch remote code. That reduces installation risk but increases the need for clarity about the runtime tool it references.

Credentials

No environment variables or credentials are declared even though Feishu Drive operations require access tokens. Absence of declared credentials is disproportionate and unclear: the skill may expect the platform to supply a connector/token, or it may be nonfunctional. Either possibility should be documented.

Persistence & Privilege

The skill does not request permanent presence (always:false) and uses normal agent invocation. It does not declare any behavior that modifies other skills or system configuration.

What to consider before installing

This skill's functionality (managing Feishu Drive) normally requires authenticated API access, but the skill does not declare how credentials are provided. Before installing, ask the publisher: 1) How does the agent obtain Feishu credentials (OAuth flow, platform-managed connector, or user-supplied token)? 2) What exact permissions/scopes are required? 3) Where is the feishu_drive tool implemented and who controls its backend? If the answers indicate the platform will inject a shared Feishu token, consider the privacy risk (access to all your cloud files). If the skill instead requests unrelated credentials or asks to read system files, do not install. If you proceed, limit the granted Feishu scopes to least privilege and verify logs/consent prompts during the first run.

Feishu Drive Skill

Use this skill when user wants to manage Feishu (飞书) cloud storage files and folders.

Tools Available

• feishu_drive: List, info, create_folder, move, delete files/folders in Feishu Drive

Use Cases

• List files and folders in Feishu Drive
• Get file/folder information
• Create new folders
• Move files/folders
• Delete files/folders

Auth

User must have Feishu account with appropriate permissions to access cloud storage.

Examples

• "帮我列出飞书云盘的文件"
• "创建一个新文件夹"
• "移动这个文件到另一个文件夹"
• "删除这个文件"