← Back to Skills Marketplace
111
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install openclaw-feishu-mcp
Description
Use when user asks about Feishu MCP (Model Context Protocol) integration for AI agents. Provides cloud document operations with native MCP tool schema. Use f...
Usage Guidance
Do not blindly paste the provided appID/appSecret into your config. The SKILL.md embeds an appSecret yet the registry lists no required credentials — this mismatch is suspicious. Before installing: (1) verify the skill publisher and source (there's no homepage/repo listed); (2) treat the included appSecret as untrusted — either replace it with credentials you control or confirm it's a harmless placeholder; (3) confirm the mcpUrl (https://feishu-openai-mcp-proxy.bytedance.net) is the intended endpoint for your organization; (4) backup ~/.openclaw/openclaw.json before making changes; (5) prefer supplying credentials via a secure channel (env or secret store) rather than embedding them into README-like instructions; (6) if you cannot verify the origin or the credential's legitimacy, avoid enabling this skill or isolate its usage (network restrictions, limited-permission Feishu app).
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-feishu-mcp
Version: 1.0.0
The skill bundle contains hardcoded sensitive credentials, specifically an `appID` and `appSecret` (BiL8CymBwxiA998MXxvUKbN23RhPsxAg), within the configuration instructions in SKILL.md. While the document management tools (read/write/create) align with the stated purpose, providing static credentials for a specific Feishu application is a high-risk practice that could lead to data interception or unauthorized access. The use of a specific proxy URL (feishu-openai-mcp-proxy.bytedance.net) further suggests a non-standard integration that should be treated with caution.
Capability Assessment
Purpose & Capability
The SKILL.md legitimately describes a Feishu MCP integration and needs an appID/appSecret to function, but the skill metadata declares no required credentials or primary credential. The file includes a hard-coded appSecret and mcpUrl (a ByteDance/Feishu proxy) — embedding a secret in the instructions is unexpected and disproportionate to a simple instruction-only plugin.
Instruction Scope
The runtime instructions explicitly instruct the user/agent to modify the user's ~/.openclaw/openclaw.json and place the appID/appSecret there. Writing credentials into a user config file is sensitive behavior. Aside from that, the actions (read/create/append/write documents and tables) stay within the stated Feishu MCP scope and do not request unrelated system files.
Install Mechanism
No install spec or code files are present (instruction-only), so nothing is downloaded or executed on install. This lowers risk from arbitrary code installation.
Credentials
The skill requires authentication (appID/appSecret) to operate but the registry metadata lists no required environment variables or primary credential. A hard-coded appSecret appears in the instructions — either this is a leaked/embedded secret or a placeholder, but either way it is inconsistent with the metadata and raises a risk of credential leakage or misuse.
Persistence & Privilege
The skill does not set always:true and is user-invocable (normal). It instructs writing to the OpenClaw config (~/.openclaw/openclaw.json) to enable the plugin — that is its own configuration and a typical persistence mechanism for plugins, but it is still a privileged operation (modifying a user config and storing credentials).
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-feishu-mcp - After installation, invoke the skill by name or use
/openclaw-feishu-mcp - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of Feishu MCP integration for OpenClaw.
- Adds support for cloud document operations (read, write, create) via Feishu MCP (Model Context Protocol).
- Enables reading and writing tables, as well as appending content in Feishu documents.
- Provides clear JSON configuration for connecting with Feishu OpenAPI using appID and appSecret.
- Supports automatic tool invocation in OpenClaw for Feishu document actions.
- Requires Feishu OpenClaw plugin and proper app permissions.
Metadata
Frequently Asked Questions
What is OpenClaw FEISHU MCP?
Use when user asks about Feishu MCP (Model Context Protocol) integration for AI agents. Provides cloud document operations with native MCP tool schema. Use f... It is an AI Agent Skill for Claude Code / OpenClaw, with 111 downloads so far.
How do I install OpenClaw FEISHU MCP?
Run "/install openclaw-feishu-mcp" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenClaw FEISHU MCP free?
Yes, OpenClaw FEISHU MCP is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does OpenClaw FEISHU MCP support?
OpenClaw FEISHU MCP is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenClaw FEISHU MCP?
It is built and maintained by cry779 (@cry779); the current version is v1.0.0.
More Skills