飞书知识库 AI 管家

PassAudited by ClawScan on May 12, 2026.

Overview

This skill is coherent for managing Feishu Wiki, but users should review any account access and confirm all node changes before execution.

Install only if you intend to let the agent help browse, search, and reorganize Feishu Wiki spaces. Use least-privilege Feishu authorization, confirm all create/move/rename operations, and note that the referenced `feishu_wiki` action itself was not included in these artifacts for review.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If approved, the agent can change the structure and names of Feishu Wiki nodes, which may affect other workspace users.

Why it was flagged

The skill instructs the agent to use tool actions that can create, move, and rename Feishu Wiki nodes. This is expected for a wiki manager, and the skill also says to confirm modifications first.

Skill content
- **创建节点**: `feishu_wiki` action="create" ... - **移动节点**: `feishu_wiki` action="move" ... - **重命名**: `feishu_wiki` action="rename"
Recommendation

Review proposed changes carefully, especially bulk moves or renames, and confirm only changes you understand.

What this means

The agent may be able to view workspace names, wiki structure, and search results from Feishu spaces accessible to your account.

Why it was flagged

The skill may list and search Feishu knowledge spaces available to the connected account. This is purpose-aligned, but it depends on the user’s Feishu authorization and workspace permissions.

Skill content
使用 `feishu_wiki` action="spaces" 列出所有可用知识空间。使用 `feishu_wiki` action="search" 在知识空间内搜索内容。
Recommendation

Use an account with appropriate least-privilege access and avoid authorizing access to spaces the agent does not need.

What this means

This review can assess the skill instructions, but not the security of the external Feishu Wiki action that actually performs API operations.

Why it was flagged

The artifacts reference an external `feishu_wiki` action, but the supplied package is instruction-only and does not include that action’s implementation or authentication handling.

Skill content
使用 `feishu_wiki` action="spaces" ... `feishu_wiki` action="nodes" ... `feishu_wiki` action="create"
Recommendation

Ensure the platform-provided `feishu_wiki` action is trusted and uses clear, least-privilege Feishu authorization.

What this means

Users might expect this skill to manage permissions, but the instructions later say it should not.

Why it was flagged

One description line mentions permission management, while the limitation section says the skill cannot set permissions. This is a minor capability inconsistency rather than evidence of malicious behavior.

Skill content
支持知识库导航、文档搜索、内容迁移、权限管理。 ... 不能设置权限(那是 feishu_perm 的工作)
Recommendation

Do not rely on this skill for Feishu Wiki permission changes; use the appropriate dedicated permission-management workflow.