← Back to Skills Marketplace
Zoe飞书媒体发送
by
ye1358215818
· GitHub ↗
· v1.0.0
· MIT-0
205
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install zoe-feishu-media
Description
Automation skill for Zoe飞书媒体发送.
Usage Guidance
Do not install blindly. Before using, ask the publisher to: (1) update registry metadata to list FEISHU_APP_ID and FEISHU_APP_SECRET as required credentials so you know what will be requested; (2) explain or include the referenced JS helper module (feishu/src/media.js) or remove the relative import—currently the JS file imports a file outside the skill bundle which could access unrelated workspace files; (3) verify that the skill only uses credentials to call official open.feishu.cn APIs (the Python code does) and does not exfiltrate data elsewhere. If you proceed, test with a throwaway Feishu app/credentials and avoid using production secrets until you've validated behavior.
Capability Analysis
Type: OpenClaw Skill
Name: zoe-feishu-media
Version: 1.0.0
The skill provides legitimate functionality for sending local images to Feishu (Lark) groups or users via official API endpoints (open.feishu.cn). The Python script (feishu_image.py) and documentation (SKILL.md) follow security best practices by advising against hardcoding credentials and instead using environment variables. There is no evidence of data exfiltration, unauthorized execution, or malicious prompt injection.
Capability Assessment
Purpose & Capability
The skill's stated purpose is to upload/send images to Feishu, and the Python code implements that using FEISHU_APP_ID / FEISHU_APP_SECRET. However, the registry metadata declares no required environment variables or primary credential, which is inconsistent: the skill does require Feishu credentials to function.
Instruction Scope
SKILL.md gives narrowly scoped runtime instructions (set FEISHU_APP_ID/SECRET, pip install requests, run send_image). The Python script only reads the explicit image file and the Feishu creds—expected for this purpose. Note: the JS file expects a cfg object and calls external helpers (uploadImageFeishu/sendImageFeishu) which are not part of this package; that expands runtime scope if executed in a larger repo.
Install Mechanism
There is no install spec (instruction-only); risk is low. The doc tells users to pip install requests, which is reasonable and not unusual for a small Python helper.
Credentials
Requesting FEISHU_APP_ID and FEISHU_APP_SECRET is proportionate to the stated function, but the skill package/registry failed to declare these required env vars. Additionally, the JS helper accepts a cfg parameter (OpenClaw config) and imports ../../../feishu/src/media.js — that implies the skill may rely on or access external project-level configuration/credentials if run in a larger workspace, increasing potential exposure.
Persistence & Privilege
Skill is not always-enabled, doesn't request system-wide config paths, and has no install hook. It does not request elevated persistence or modify other skills' settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install zoe-feishu-media - After installation, invoke the skill by name or use
/zoe-feishu-media - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Zoe开发的飞书媒体发送skill
Metadata
Frequently Asked Questions
What is Zoe飞书媒体发送?
Automation skill for Zoe飞书媒体发送. It is an AI Agent Skill for Claude Code / OpenClaw, with 205 downloads so far.
How do I install Zoe飞书媒体发送?
Run "/install zoe-feishu-media" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Zoe飞书媒体发送 free?
Yes, Zoe飞书媒体发送 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Zoe飞书媒体发送 support?
Zoe飞书媒体发送 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Zoe飞书媒体发送?
It is built and maintained by ye1358215818 (@ye1358215818); the current version is v1.0.0.
More Skills