Auwomo Message
PassAudited by ClawScan on May 13, 2026.
Overview
This skill is a clearly scoped Lark/Feishu message-sending helper, but users should remember it can send real organization messages through a bot account.
Before installing, confirm that `auwomo` and `lark-cli` are trusted and configured for the right organization. For important or sensitive messages, ask the agent to use `--dry-run` first and verify the recipient and message text before sending.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If invoked, the agent can send an actual private message to an organization member through the configured CLI.
The documented command performs a real external message send. This matches the skill purpose, but users should verify recipient and content before execution.
auwomo message send --to "黄永强" --text "请今天下班前补一下日报。"
Use the documented `--dry-run` preview for sensitive messages and confirm the exact recipient and text before sending.
Messages may be sent from the configured bot account, and the bot's access determines who can be messaged.
The skill sends through a bot identity rather than the user's identity. This is disclosed and purpose-aligned, but depends on the bot's configured organization permissions.
使用 bot 身份发送 — 不以用户身份发送
Ensure the bot account has only the permissions needed for message sending and that users understand messages will come from the bot identity.
The reviewed skill text is simple, but the actual message-sending behavior depends on the installed `auwomo` and `lark-cli` tools.
The skill delegates behavior to local external binaries that are not included in the reviewed artifacts. This is expected for an instruction-only CLI wrapper, but users must trust those binaries.
Required binaries (all must exist): auwomo, lark-cli; No install spec — this is an instruction-only skill.
Install `auwomo` and `lark-cli` only from trusted sources and keep them configured for the intended organization.
