Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
feishu-group-memory-system-飞书群聊记忆管理
v1.0.0飞书群聊上下文持久化技能。当用户在群聊中说"保存上下文"时保存当前群聊对话；在私聊中会根据用户意图分流到手动群聊存档或其他操作。
⭐ 1· 137·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is described as a Feishu group-memory persistence helper and all required actions (detect chat_id, summarize session history, read/write memory files, hook into session startup/heartbeat) are consistent with that purpose. It does not ask for unrelated binaries, cloud credentials, or network endpoints.
Instruction Scope
SKILL.md instructs the agent to read inbound context (chat_id), session history, and to read/write files under memory/FeishuGroupMemory and daily memory/YYYY-MM-DD.md. It also instructs the operator to add entries to AGENTS.md, SOUL.md, and optionally HEARTBEAT.md so the skill runs on session startup/heartbeat. These are expected for persistent memory but are broader than a purely in-memory helper because they modify agent startup behavior and persist content to disk. The skill also treats messages prefixed with [SYSTEM] as internal commands (do not reply and act on them), which is legitimate but means system-originated messages can trigger actions — ensure only trusted system messages are used.
Install Mechanism
Instruction-only skill with no install spec and no code files. Nothing is downloaded or written by an installer step. Risk from installation actions is minimal.
Credentials
The skill does not request environment variables, credentials, or config paths. File paths it uses are limited to the agent workspace (memory/FeishuGroupMemory, AGENTS.md, SOUL.md, HEARTBEAT.md), which is proportional to a persistence feature.
Persistence & Privilege
The skill does not set always:true and is user-invocable. However, the setup requires adding startup/heartbeat hooks to AGENTS.md/SOUL.md so the skill will be invoked automatically on session start/heartbeat if configured. That gives it ongoing ability to read session context and write memory files, which is reasonable for a memory skill but increases its long-term blast radius compared to a purely on-demand helper.
Assessment
This skill appears to do what it says: persist Feishu group conversation summaries to markdown files and load them on session start. Before enabling it: 1) Review and back up AGENTS.md, SOUL.md, and HEARTBEAT.md changes the skill asks you to make; these are global startup hooks that affect session behavior. 2) Confirm you are comfortable storing group content under memory/FeishuGroupMemory and daily memory files (they may contain sensitive discussion or decisions). 3) Consider disabling heartbeat/automatic saves and test manual save/load first to confirm formatting and retention meet your needs. 4) Ensure only trusted system-originated messages can use the [SYSTEM] prefix (since the skill will treat them as internal commands). 5) If you want tighter control, keep the skill manual-only and avoid adding it to Every Session. If the skill later asks for network endpoints, external URLs, or credentials, stop and reassess—those would be disproportionate to this purpose.Like a lobster shell, security has layers — review code before you run it.
feishuvk976dfyntpyrjv2jm77450abqn834xyklatestvk976dfyntpyrjv2jm77450abqn834xykmemoryvk976dfyntpyrjv2jm77450abqn834xyk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.