Auwomo Message

PassAudited by ClawScan on May 13, 2026.

Overview

This skill is a clearly scoped Lark/Feishu message-sending helper, but users should remember it can send real organization messages through a bot account.

Before installing, confirm that `auwomo` and `lark-cli` are trusted and configured for the right organization. For important or sensitive messages, ask the agent to use `--dry-run` first and verify the recipient and message text before sending.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If invoked, the agent can send an actual private message to an organization member through the configured CLI.

Why it was flagged

The documented command performs a real external message send. This matches the skill purpose, but users should verify recipient and content before execution.

Skill content
auwomo message send --to "黄永强" --text "请今天下班前补一下日报。"
Recommendation

Use the documented `--dry-run` preview for sensitive messages and confirm the exact recipient and text before sending.

What this means

Messages may be sent from the configured bot account, and the bot's access determines who can be messaged.

Why it was flagged

The skill sends through a bot identity rather than the user's identity. This is disclosed and purpose-aligned, but depends on the bot's configured organization permissions.

Skill content
使用 bot 身份发送 — 不以用户身份发送
Recommendation

Ensure the bot account has only the permissions needed for message sending and that users understand messages will come from the bot identity.

What this means

The reviewed skill text is simple, but the actual message-sending behavior depends on the installed `auwomo` and `lark-cli` tools.

Why it was flagged

The skill delegates behavior to local external binaries that are not included in the reviewed artifacts. This is expected for an instruction-only CLI wrapper, but users must trust those binaries.

Skill content
Required binaries (all must exist): auwomo, lark-cli; No install spec — this is an instruction-only skill.
Recommendation

Install `auwomo` and `lark-cli` only from trusted sources and keep them configured for the intended organization.