feishu-doc-write

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a reference-only Feishu document writing skill; it is purpose-aligned but users should notice that it describes authenticated API calls that can modify cloud documents.

Install/use this skill only if you want the agent to help write content into Feishu/Lark documents. Before use, confirm the target document ID, review the content to be uploaded, and ensure any Feishu token has only the permissions needed for that task.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used with valid Feishu access, the agent could add or change content in the specified cloud document.

Why it was flagged

This documents authenticated API calls that insert blocks into a Feishu cloud document. That is aligned with the skill's purpose, but it can modify remote document content.

Skill content
POST /open-apis/docx/v1/documents/{document_id}/blocks/{block_id}/children?document_revision_id=-1 ... "children": [ ...Block array... ], "index": 0
Recommendation

Use it only for intended Feishu documents, verify document IDs and insertion positions, and review generated content before allowing writes.

What this means

A token with broad Feishu permissions could let the agent write to more documents than the user intended.

Why it was flagged

The documented workflow requires a Feishu tenant access token. This is expected for the integration, but it is delegated account/workspace authority and should be scoped carefully.

Skill content
Authorization: Bearer <tenant_access_token>
Recommendation

Use least-privilege Feishu app permissions, avoid sharing broad tenant tokens with unrelated tools, and rotate/revoke credentials if they may have been exposed.