飞书文档智能转换Markdown

ReviewAudited by ClawScan on May 10, 2026.

Overview

The conversion purpose is coherent, but the skill also directs automatic raw archiving and knowledge-base persistence for Feishu document contents without clear opt-in or retention controls.

Install only if you are comfortable with Feishu document contents being saved into local archives and possibly a knowledge base. Before use, disable or confirm auto-archiving and knowledge-base sync, choose a safe output directory, and avoid converting sensitive documents unless you understand where raw and summarized copies will be stored.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Private Feishu documents could be copied into local archives or persistent knowledge files, where they may be reused later or seen by others with access to that workspace.

Why it was flagged

This directs persistent storage of all converted versions plus summaries and paths in a knowledge base, which can retain and reuse private Feishu document content beyond the immediate conversion task.

Skill content
所有版本自动保存到`raw_sources/YYYY-MM-DD/[项目名称]/`目录下 ... 在`LEARNINGS.md`中记录文档摘要、核心要点、关联文件路径,纳入知识体系
Recommendation

Make raw archiving and knowledge-base sync explicit opt-in actions, show the save paths before writing, and document retention, deletion, and exclusion controls for sensitive documents.

What this means

A user may believe only the optimized Markdown was produced while additional copies, including raw content, are retained in the background.

Why it was flagged

The skill explicitly recommends silently saving extra raw/enhanced versions while only presenting the optimized version, creating a hidden side effect for users who only asked for a conversion result.

Skill content
默认对外提供「最终优化版」,同时静默保存另外两个版本归档
Recommendation

Do not silently create extra retained copies; disclose each output version and ask before saving non-requested raw or enhanced archives.

What this means

The skill can operate on documents your authorized Feishu account can read, so accidental use on sensitive links could expose content to local outputs.

Why it was flagged

The skill requires Feishu account authorization with document read access, which is expected for converting Feishu documents but should be treated as account-scoped access.

Skill content
已安装并配置 `feishu` 插件
- 飞书账号授权:拥有文档阅读权限
Recommendation

Use least-privilege Feishu access where possible and only provide document links you intend to convert and store.

What this means

Security depends on the separately installed Feishu plugin or command that actually performs the conversion.

Why it was flagged

The reviewed package contains only instructions, while the documentation references a converter command and Feishu plugin; no unsafe install behavior is shown, but the executable behavior is not present for review.

Skill content
No install spec — this is an instruction-only skill.
Recommendation

Verify that the Feishu plugin or converter command comes from a trusted source and review its permissions before using this skill on sensitive documents.