← Back to Skills Marketplace
alexanys

Feishu Bridge

by Yangsen AN · GitHub ↗ · v1.0.0
cross-platform ✓ Security Clean
11599
Downloads
8
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install feishu-bridge
Description
Connect a Feishu (Lark) bot to Clawdbot via WebSocket long-connection. No public server, domain, or ngrok required. Use when setting up Feishu/Lark as a messaging channel, troubleshooting the Feishu bridge, or managing the bridge service (start/stop/logs). Covers bot creation on Feishu Open Platform, credential setup, bridge startup, macOS launchd auto-restart, and group chat behavior tuning.
Usage Guidance
Install only if you want the configured Feishu bot to pass chat text to your local Clawdbot agent and post replies back. Protect the Feishu secret and Clawdbot token, restrict the bot to intended chats, review the group-response rules, update and lock the ws dependency to a fixed version, and unload the LaunchAgent when you do not want the bridge running.
Capability Analysis
Type: OpenClaw Skill Name: feishu-bridge Version: 1.0.0 This skill is classified as suspicious due to its use of high-risk capabilities, specifically reading sensitive local files and establishing persistence, even though these actions are explicitly documented and appear necessary for its stated purpose. The `bridge.mjs` script reads the Feishu App Secret from `~/.clawdbot/secrets/feishu_app_secret` and a Clawdbot Gateway token from `~/.clawdbot/clawdbot.json`. The `setup-service.mjs` script creates a macOS `launchd` plist file (`~/Library/LaunchAgents/com.clawdbot.feishu-bridge.plist`) to ensure the bridge runs persistently and restarts automatically. While these actions are transparently explained in `SKILL.md` and `README.md` and are used for local communication or legitimate API interactions, they represent significant system access that warrants a 'suspicious' classification rather than 'benign' given the defined thresholds for high-risk behaviors.
Capability Assessment
Purpose & Capability
The code matches the stated purpose: it receives Feishu text messages, forwards them to the local Clawdbot Gateway, and posts replies back to Feishu.
Instruction Scope
Group-chat reply triggers are broader than direct mentions, but they are documented and implemented plainly; I found no hidden prompt overrides, unrelated commands, or deceptive behavior.
Install Mechanism
Installation is user-directed through npm and normal Node scripts. The ws dependency range can include vulnerable 8.x releases, so users should update and lock it before relying on the bridge as a long-running service. ([nvd.nist.gov](https://nvd.nist.gov/vuln/detail/CVE-2026-45736))
Credentials
Reading the Feishu App Secret and Clawdbot Gateway token is sensitive but narrowly scoped, disclosed, and necessary for this integration; message routing to Feishu and the local Gateway is consistent with the bridge purpose.
Persistence & Privilege
The launchd LaunchAgent uses RunAtLoad and KeepAlive persistence, but it is optional, user-invoked, documented, and includes an unload command; it does not request elevated privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install feishu-bridge
  3. After installation, invoke the skill by name or use /feishu-bridge
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: Feishu/Lark bot to Clawdbot bridge via WebSocket
Metadata
Slug feishu-bridge
Version 1.0.0
License
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Feishu Bridge?

Connect a Feishu (Lark) bot to Clawdbot via WebSocket long-connection. No public server, domain, or ngrok required. Use when setting up Feishu/Lark as a messaging channel, troubleshooting the Feishu bridge, or managing the bridge service (start/stop/logs). Covers bot creation on Feishu Open Platform, credential setup, bridge startup, macOS launchd auto-restart, and group chat behavior tuning. It is an AI Agent Skill for Claude Code / OpenClaw, with 11599 downloads so far.

How do I install Feishu Bridge?

Run "/install feishu-bridge" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Feishu Bridge free?

Yes, Feishu Bridge is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Feishu Bridge support?

Feishu Bridge is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Feishu Bridge?

It is built and maintained by Yangsen AN (@alexanys); the current version is v1.0.0.

💬 Comments