Feishu Sender

Send messages and files to Feishu (Lark) via Open API. Supports text, markdown, any file format, and images. Use when user needs to send notifications, repor...

Security Scan

The skill's code, declared environment variables, and runtime instructions are consistent with a Feishu (Lark) messaging/sending tool and do not request unrelated credentials or suspicious installs.

Purpose & Capability

Name/description (send messages/files to Feishu) match the declared env vars (FEISHU_APP_ID, FEISHU_APP_SECRET, FEISHU_CHAT_ID) and the included code implements token retrieval, file/image upload, and message sending to open.feishu.cn.

Instruction Scope

SKILL.md and the CLI instruct setting FEISHU env vars or a .env file and calling the CLI or library. The code will read any file paths you pass (to upload/send) and will optionally load a provided .env file into os.environ — this is expected for a sender but means the skill will transmit any local file you explicitly provide.

Install Mechanism

No install spec (instruction-only). The code uses the requests library but no installer is declared. No remote download URLs or archive extraction are present.

Credentials

Only FEISHU_APP_ID, FEISHU_APP_SECRET, and FEISHU_CHAT_ID are required — these are the expected credentials for Feishu Open API. The code does not request additional unrelated secrets or config paths.

Persistence & Privilege

Skill is not always-enabled and does not request system-wide persistence or modify other skills. It runs only when invoked and performs network calls to the official Feishu Open API domain.

Assessment

This skill appears to do what it says: send messages and files to Feishu. Before installing or using it: (1) verify the FEISHU_APP_ID/SECRET and chat ID come from a dedicated Feishu app with minimal permissions; (2) review the included Python code if you don't trust the publisher (it will upload any file path you supply and will load a .env file into your environment); (3) ensure the runtime has the 'requests' package available or install it in an isolated environment; (4) avoid passing sensitive local files to the CLI unless you intend to transmit them; and (5) prefer creating an app/credentials with least privilege and monitor outgoing traffic to open.feishu.cn. If you want extra assurance, run the code in a disposable/isolated environment and inspect network requests.

飞书（Lark）消息发送工具，支持主动推送文本、文件和图片到指定群聊。

Quick Start

from feishu_sender import FeishuSender

sender = FeishuSender()
sender.send_text("Hello Feishu!")
sender.send_file("report.pdf")

CLI Usage

python3 scripts/send.py --text "Hello"
python3 scripts/send.py --file report.pdf
python3 scripts/send.py --text "Report" --files "a.docx,b.pdf"

Configuration

Set environment variables or create .env:

FEISHU_APP_ID=cli_xxxxx
FEISHU_APP_SECRET=xxxxxxxx
FEISHU_CHAT_ID=oc_xxxxxx

Get credentials from Feishu Open Platform.

Resources

• feishu_sender.py - Core module with FeishuSender class
• scripts/send.py - CLI entry point