← Back to Skills Marketplace
117
Downloads
0
Stars
1
Active Installs
3
Versions
Install in OpenClaw
/install feishu-assistant
Description
飞书助手，用于发送图片到飞书平台。当用户需要将生成的图片发送到飞书（私聊或群聊）时使用此技能。支持通过 user_id、open_id 或 chat_id 发送图片。
README (SKILL.md)
Feishu Assistant
发送图片到飞书平台（私聊或群聊）。
凭证配置（0配置，开箱即用）
✅ 推荐：OpenClaw 主配置（无需任何操作）
如果你的 OpenClaw 已经配置了飞书机器人，自动读取，无需任何操作。
技能会级联读取飞书凭证，优先级：
- 环境变量
FEISHU_APP_ID/FEISHU_APP_SECRET - OpenClaw 主配置
~/.openclaw/openclaw.json中的飞书配置 - 以上都没有 → 脚本会报"未配置飞书凭证"错误
获取飞书配置
- 访问 https://open.feishu.cn/ 创建企业自建应用
- 获取 App ID 和 App Secret
- 开启权限：
im:message:send_as_bot - 将应用添加到群聊（获取 chat_id）
使用方法
发送图片到群聊
python3 scripts/send_image.py /path/to/image.png --chat-id chat_xxxxx
发送图片到用户（私聊）
# 通过 user_id
python3 scripts/send_image.py /path/to/image.png --user-id u_xxxxx
# 通过 open_id
python3 scripts/send_image.py /path/to/image.png --open-id o_xxxxx
回复某条消息（发送到同一对话）
python3 scripts/send_image.py /path/to/image.png --message-id oxxxxxx
获取 ID 的方法
| ID 类型 | 格式 | 获取方式 |
|---|---|---|
| 群聊 ID | chat_xxxxx |
飞书群设置 → 群机器人 → 复制 Chat ID |
| 用户 ID | u_xxxxx |
企业内部用户 ID，通过 API 或管理后台获取 |
| Open ID | o_xxxxx |
开放平台用户 ID，可通过机器人获取 |
| 消息 ID | o_xxxxx |
消息事件中携带的 message_id |
集成其他技能
当用户说"发送到飞书"或"发到群里"时，调用此技能发送图片。
脚本路径：
skills/feishu-assistant/scripts/send_image.py
Usage Guidance
This skill's code does what it says (uploads and sends images to Feishu), but it will look for FEISHU_APP_ID / FEISHU_APP_SECRET or read your ~/.openclaw/openclaw.json even though the registry metadata claims 'no required config'. Before installing, review and confirm you are comfortable with the skill reading your OpenClaw config and providing it Feishu credentials. Consider: (1) Inspect ~/.openclaw/openclaw.json to see what will be read; (2) Prefer setting FEISHU_APP_ID/FEISHU_APP_SECRET in a dedicated environment rather than relying on a global OpenClaw config; (3) If you have sensitive credentials in your OpenClaw config, avoid granting this skill access or run it in an isolated account/environment; (4) Optionally run the script locally first to validate behaviour and network calls, and ensure you trust the skill owner before giving it production credentials.
Capability Analysis
Type: OpenClaw Skill
Name: feishu-assistant
Version: 1.1.1
The feishu-assistant skill is a legitimate tool for sending images to the Feishu platform. The script `scripts/send_image.py` correctly implements its stated functionality, including credential management from environment variables or the local `~/.openclaw/openclaw.json` config, image type validation using magic bytes, and rate limiting. No evidence of data exfiltration, malicious execution, or prompt injection was found.
Capability Assessment
Purpose & Capability
The name/description (send images to Feishu) matches the included script: it uploads an image and sends or replies to messages via the official open.feishu.cn API endpoints. Needing an App ID/App Secret is expected for this capability, but the registry metadata lists no required env vars or primary credential — that's inconsistent with the actual code and SKILL.md.
Instruction Scope
SKILL.md and scripts instruct the agent to auto-read credentials from environment variables or from the OpenClaw main config at ~/.openclaw/openclaw.json. This is reasonable for convenience, but the instructions give the skill implicit permission to read a user’s global OpenClaw config (not declared in metadata) which may contain other channels/credentials. The script only calls Feishu endpoints (no other external endpoints) and only uploads the provided image, so there is no obvious exfiltration to unknown domains.
Install Mechanism
There is no install spec (instruction-only plus a small Python script). Nothing is downloaded from external or untrusted URLs. The script uses the requests library which may need to be present in the runtime environment but no installer is provided — low install-surface risk.
Credentials
The code requires FEISHU_APP_ID and FEISHU_APP_SECRET (or the OpenClaw config file) to operate, which is appropriate for a Feishu integration. However the skill metadata declares 'Required env vars: none' and 'Required config paths: none' while the runtime instructions and script explicitly read those values. This mismatch is the main proportionality concern because the skill will access user credentials/config without that being declared in the registry metadata.
Persistence & Privilege
The skill is not marked always:true, does not modify other skills or system-wide settings, and does not persist new credentials beyond reading them. Autonomous invocation is allowed (platform default) but combined with the above undeclared credential access it increases the need for caution.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install feishu-assistant - After installation, invoke the skill by name or use
/feishu-assistant - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.1
安全更新：新增文件类型magic bytes校验；新增滑动窗口频率限制（60秒最多30次）
v1.1.0
安全修复：移除硬编码凭证，改为环境变量/OpenClaw配置级联读取；添加.clawhubignore保护
v1.0.0
初始版本：支持发送图片到飞书私聊/群聊
Metadata
Frequently Asked Questions
What is Feishu Assistant?
飞书助手，用于发送图片到飞书平台。当用户需要将生成的图片发送到飞书（私聊或群聊）时使用此技能。支持通过 user_id、open_id 或 chat_id 发送图片。 It is an AI Agent Skill for Claude Code / OpenClaw, with 117 downloads so far.
How do I install Feishu Assistant?
Run "/install feishu-assistant" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Feishu Assistant free?
Yes, Feishu Assistant is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Feishu Assistant support?
Feishu Assistant is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Feishu Assistant?
It is built and maintained by kinggu (@gushenjie); the current version is v1.1.1.
More Skills