Feishu File Delivery
AdvisoryAudited by Static analysis on May 3, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Any existing local file path included in the final Feishu reply may be uploaded to the chat, and the absolute path itself may reveal local directory information.
The skill intentionally sends local files through the Feishu adapter based on paths included in a message. This is disclosed and purpose-aligned, but it crosses a local-to-chat data boundary.
OpenClaw's Feishu outbound adapter automatically detects and uploads files when: ... Absolute file paths appear in the reply text ... Files exist at those paths
Before sending, ensure the listed paths point only to files the user intended to share, preferably freshly generated outputs in a known workspace directory.