Back to skill
Skillv1.0.9

VirusTotal security

Feishu File Sender · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 28, 2026, 4:25 AM
Hash
241581e3b2eae5a17da3062abe3023423a7b5deac9c7451b1be459dfa2fc641c
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: feishu-file-sender Version: 1.0.9 The skill 'feishu-file-sender' is designed to upload local files to Feishu via its OpenAPI and send them as messages. The Python script (`scripts/feishu_file_sender.py`) correctly implements this functionality by reading Feishu credentials (appId, appSecret) from `~/.openclaw/openclaw.json`, obtaining an access token from `open.feishu.cn`, and then using legitimate Feishu API endpoints for file upload and message sending. All documentation (`SKILL.md`, `README.md`, `clawdis.yaml`) is transparent about its network access and credential usage, explicitly stating that credentials are not stored or transmitted elsewhere. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent.
External report
View on VirusTotal