飞书云盘 AI 管家

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: feishu-drive-organizer Version: 1.0.2 The skill bundle is a legitimate utility for managing Feishu (Lark) Drive files. The tools defined in SKILL.md (e.g., feishu_drive.list, move, delete) are consistent with the stated purpose of organizing cloud storage, and the instructions contain no evidence of prompt injection, data exfiltration, or unauthorized access. Safety measures like soft-deletion and user confirmation are explicitly mentioned.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used carelessly, the agent could reorganize, soft-delete, or comment on cloud-drive items under the user's Feishu permissions.

Why it was flagged

These tools can mutate Feishu Drive state and comments. That is purpose-aligned for a drive organizer, but users should notice that the skill can perform account-impacting actions.

Skill content
`feishu_drive.create_folder` ... `feishu_drive.move` ... `feishu_drive.delete` ... `feishu_drive.add_comment` ... `feishu_drive.reply_comment`
Recommendation

Ask for a dry-run list before bulk actions, confirm target folders and file lists, and review any comment text before it is posted.

What this means

The agent may be able to list, move, delete, and comment on any Feishu Drive items permitted by the connected account.

Why it was flagged

The skill relies on Feishu Open Platform access and would operate within the authorized user's account permissions; this is expected, but the registry metadata does not declare a primary credential or capability tag.

Skill content
本技能使用以下飞书开放平台 API:
Recommendation

Authorize only the minimum Feishu scopes needed, prefer a least-privileged account or workspace, and check the platform's permission prompt before use.

NoteHigh Confidence
ASI08: Cascading Failures
What this means

A mistaken folder, date, or file-type rule could change many files in a shared drive workflow.

Why it was flagged

Recursive scans and batch classification can affect many cloud files at once. This is aligned with the organizer purpose, but broad criteria could cause widespread unintended reorganization.

Skill content
Agent 会递归扫描并生成过期文件清单 ... `feishu_drive.move` 批量归类
Recommendation

Start with reports only, limit the folder scope and batch size, and confirm proposed changes before letting the agent apply them.