← Back to Skills Marketplace
3190
Downloads
1
Stars
16
Active Installs
2
Versions
Install in OpenClaw
/install skill-feishu-manager
Description
Comprehensive Feishu (飞书) management toolkit for documents, knowledge bases, bitables, and cloud storage.
Usage Guidance
This skill appears to be a Feishu connector but doesn't declare the credentials or config it needs. Before installing: 1) Verify the skill's source and trustworthiness (no homepage or publisher info provided). 2) Do not supply your production app_id/app_secret or workspace tokens until you confirm provenance; test in a sandbox Feishu app/workspace. 3) Ask the author to declare required env vars/config in the registry (where credentials will be stored) and to justify each requested scope; prefer least-privilege scopes. 4) Confirm where tokens will be stored by the agent and whether the skill will act autonomously with those tokens. 5) If you must use it, create a dedicated Feishu app with minimal permissions and rotate credentials after testing.
Capability Analysis
Type: OpenClaw Skill
Name: skill-feishu-manager
Version: 1.0.1
The skill bundle appears benign. It provides a toolkit for managing Feishu resources (documents, wiki, bitable, drive) as described. The `SKILL.md` contains clear, functional instructions for the AI agent without any prompt injection attempts or out-of-scope commands. The `README.md` provides standard installation and setup instructions, including necessary Feishu API permissions and configuration for `app_id` and `app_secret`. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation across any of the files.
Capability Assessment
Purpose & Capability
The name/description match a Feishu management tool, and the SKILL.md shows actions for documents, wiki, bitable, and drive. However the registry metadata lists no required credentials or config, while README and examples refer to app_id/app_secret, doc/app tokens, and Feishu scopes. A Feishu integration legitimately needs credentials; not declaring them is an incoherence.
Instruction Scope
The SKILL.md instructions are narrowly focused on Feishu operations (feishu_doc, feishu_wiki, feishu_bitable_*, feishu_drive) and do not instruct the agent to read arbitrary local files or external endpoints. However they rely on tokens/identifiers (doc_token, app_token, folder_token) without explaining how/where these are supplied or stored, which gives the skill implicit access to potentially sensitive workspace data if credentials are provided.
Install Mechanism
This is an instruction-only skill with no install spec and no code files beyond docs, so it does not install third-party binaries or download archives. That lowers the attack surface but also means there is no executable code to audit beyond the instructions.
Credentials
No required environment variables, primary credential, or config paths are declared in registry metadata, yet README explicitly shows channel configuration (app_id/app_secret) and SKILL.md examples require tokens. The requested Feishu scopes (docx:document, wiki:wiki, drive:drive, bitable:data) are broad; failing to declare credential requirements is disproportionate and prevents proper review of what secrets the skill will use or need.
Persistence & Privilege
always:false (normal) and autonomous invocation is allowed (platform default). This is not itself a fault, but combined with the undeclared credential requirements and broad scopes it means the agent could access Feishu data autonomously once credentials are provided — consider the blast radius in that scenario.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skill-feishu-manager - After installation, invoke the skill by name or use
/skill-feishu-manager - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Update - Fixed publish path issue
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Feishu Manager?
Comprehensive Feishu (飞书) management toolkit for documents, knowledge bases, bitables, and cloud storage. It is an AI Agent Skill for Claude Code / OpenClaw, with 3190 downloads so far.
How do I install Feishu Manager?
Run "/install skill-feishu-manager" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Feishu Manager free?
Yes, Feishu Manager is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Feishu Manager support?
Feishu Manager is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Feishu Manager?
It is built and maintained by limoxt (@limoxt); the current version is v1.0.1.
More Skills