Feishu File Send
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only skill is coherently focused on sending user-selected workspace files to Feishu, with the main caution that it can share local files through a Feishu messaging channel.
This skill appears benign and purpose-aligned, but it is designed to send local files through Feishu. Use it only for files you intend to share, keep files in the workspace as instructed, confirm the destination, and adapt any hard-coded example paths before copying commands.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Files selected for this workflow may be uploaded or delivered through Feishu, so sending the wrong file could expose private content.
The skill instructs the agent to send a local file through the Feishu messaging channel, which is the stated purpose but is still an external data-sharing flow.
message(action="send", channel="feishu", media="/absolute/path/to/file.pdf", caption="文件描述")
Before invoking the skill, confirm the file path, file contents, and intended Feishu destination.
The skill may rely on Feishu account permissions that allow messages and files to be sent.
The skill notes that Feishu message and drive/file permissions may be needed, which is expected for sending files but involves delegated account capability.
检查飞书权限（im:message, drive:file）
Use a Feishu account or app permission set that is appropriate for the files you intend to send.
If copied directly, the example runs local Python and writes a file in the workspace.
A fenced example shows using Python via subprocess to create a sample PDF in the workspace before sending it. This is documented as an example flow, not hidden executable code.
subprocess.run(['python3', '-c', '''... with open('/Users/wangbotao/.openclaw/workspace/test.pdf', 'w') as f:Only run or adapt the example if you understand the file it will create and update the hard-coded path for your own environment.