yuqing-bitable-and-label

Incrementally sync data from XiaoAi API to Feishu Bitable and optionally auto-label records with machine-based type and sentiment annotations.

This skill appears to implement the claimed sync-and-label workflow and requires Feishu app credentials and a XiaoAi token — those are expected. Things to consider before installing: - Do NOT set OPENAI_API_KEY / OPENAI_BASE_URL / OPENAI_MODEL unless you trust the external LLM gateway: if provided the skill will send record content to that gateway (default base is api.openai.com), but the SKILL.md did not declare network permissions for that. That mismatch can result in unexpected outbound data transfer. - The skill writes logs, a cache directory, and lock/status files inside its own directory and the provided shell helpers may edit the local .env (monitor.sh/sync.sh include auto-fix logic). Review any .env you place in the skill directory so it does not contain unrelated secrets. - If you plan to run this in production, run it in an isolated environment or staging workspace first and inspect outputs (sync.log, error.log, .sync_status.json). Confirm the run_only network hosts are acceptable. - If you need labeling without sending data to third-party LLMs, verify the labeling mode will accept model outputs via stdin (the code supports a stdin/OpenClaw mode) and avoid supplying OPENAI_* env vars. - If you want to be safer, audit the run_once functions in excel_to_feishu_bitable.py and bitable_labeling_skill.py (they perform HTTP calls and modify bitable fields) to confirm there are no additional unexpected endpoints or behaviors.

Type: OpenClaw Skill Name: yuqing-bitable-and-label Version: 2.0.8 The skill bundle is a comprehensive tool for synchronizing public sentiment data from the XiaoAi (Wisers) API to Feishu Bitable and performing automated labeling using LLMs. The Python scripts (excel_to_feishu_bitable.py, bitable_labeling_skill.py) implement robust data handling, including token caching, connection pooling, and batch processing. The shell scripts (sync.sh, monitor.sh) provide operational support such as health checks, log rotation, and error recovery. The permissions are appropriately restricted to Feishu and the specified data service, and the code contains no evidence of malicious intent, data exfiltration, or unauthorized execution.