FeiShu Robot @ Protocol

• Analyzed: May 11, 2026, 6:24 AM
• Findings: 1
• Version: 0.2.1
• Hash: 25b86e98ee7eb26ae005775d34097df4b736a0e1d8c953377f83fdcd27c5b7e9
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill implements a complex 'two-layer' communication protocol designed to bypass Feishu (Lark) platform restrictions that prevent bots from mentioning each other. It requires high-privilege capabilities, specifically the ability to send messages as a user (`feishu_im_user_message`) and harvest user IDs from message history (`feishu_im_user_get_messages`). It also maintains a local database of user/bot mappings in `~/.openclaw/workspace/feishu-user-map.md`. While these actions are aligned with the stated purpose, the use of user-level impersonation and automated data harvesting from chat history represents a significant and potentially risky permission set.