飞书多维表格 AI 管家

PassAudited by ClawScan on May 12, 2026.

Overview

This instruction-only skill matches its Feishu Bitable automation purpose, but it can read and change tables, so use limited permissions and confirm bulk or destructive actions.

Before installing, make sure the Feishu authorization is limited to the Bitable apps you intend to manage. Treat bulk updates, field deletion, and report sharing as actions that need user review, especially when tables contain customer, employee, financial, or other sensitive data.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Note

ASI02: Tool Misuse and Exploitation

What this means

A mistaken table link, table ID, field name, or prompt could cause unintended changes to Feishu Bitable data.

Why it was flagged

The skill directs the agent to create/delete fields and batch mutate records. This is central to a Bitable automation skill, but it can materially alter table structure and data.

Skill content

- 创建多维表格应用和表
- 增删字段
...
- 批量创建记录
- 批量更新记录

Recommendation

Use it only on intended tables, preview changes before bulk writes, and require explicit confirmation or backups before deleting fields or making large updates.

Note

ASI03: Identity and Privilege Abuse

What this means

The agent may be able to access or change Bitable apps and tables available to the authorized Feishu app or user.

Why it was flagged

The skill expects Feishu Bitable app permissions. This is expected for the integration, but users should understand which Feishu account or app authority will be used.

Skill content

- 需要飞书应用有 Bitable 权限（`bitable:app` scope）

Recommendation

Use least-privilege Feishu app permissions, restrict access to the needed Bitable apps, and revoke access when no longer needed.

Note

ASI02: Tool Misuse and Exploitation

What this means

Report content or table-derived summaries could be posted to a group chat if that optional step is used.

Why it was flagged

A reference example includes optionally sending generated report content to a Feishu group chat. This is plausible for report workflows but goes beyond editing the Bitable itself.

Skill content

可选：`feishu_chat` 发送到群聊

Recommendation

Confirm the target chat and review/redact sensitive report content before sending messages.