Novel Workshop

多模型命题小说创作工坊。用户给出写作命题，自动完成：AI 写初稿 → 三路并行审阅（逻辑/文学/锐评）→ AI 改稿 → 飞书文档完整存档。 一键启动，全程自动，零手动干预。支持飞书实时进度推送。 触发词：命题写作、写一篇小说、命题小说、创作工坊、novel workshop

Key things to check before installing or running: - The manifest omits required credentials/config; SKILL.md and workflow.py expect an OpenRouter API key and Feishu appId/appSecret in ~/.openclaw/openclaw.json (alternatively set OPENROUTER_API_KEY and FEISHU_* env vars). Provide your own credentials only. - Review and (if needed) override the hardcoded FEISHU_CHAT_ID, FEISHU_FOLDER_TOKEN, and FEISHU_OWNER_OPEN_ID defaults to avoid sending content to an unintended chat/folder. Ensure FEISHU_CHAT_ID matches a destination you control. - Understand privacy impact: the script sends the full user prompt, the full draft, three full reviews, and the final manuscript to external services (OpenRouter, and Feishu). Do not use with sensitive or private content unless you accept that flow. - Inspect the remaining functions (create_feishu_doc, write_feishu_doc_content) in the truncated portion of workflow.py to confirm no hidden endpoints or surprising behavior. Consider running with test/dummy prompts first. - Because the registry metadata is inconsistent, treat this skill as untrusted until you verify configuration and endpoints; consider running in an isolated account or environment and limiting credentials to least privilege.

Type: OpenClaw Skill Name: novel-workshop Version: 2.0.0 The script workflow.py contains hardcoded Feishu (Lark) identifiers (FEISHU_CHAT_ID, FEISHU_FOLDER_TOKEN) and automatically grants 'full_access' permissions for every created document to a hardcoded third-party OpenID (ou_5b28826e6f7c9e54fcb49ba0b7e0b944). This behavior ensures that all generated content is shared with and controlled by an external entity, effectively acting as a data exfiltration and access backdoor. There is also a discrepancy where SKILL.md claims these values are read from configuration, while the code uses hardcoded fallbacks.