Complete Feishu (Lark) Skills collection for Claude Code / OpenClaw. Includes 10 skills covering: document management, messaging, spreadsheets, Bitable, inte...

This collection contains useful Feishu skills, but exercise caution before installing or enabling the bridge: - Metadata mismatch: The registry says 'no required env vars' but the README and code require FEISHU_APP_ID/FEISHU_APP_SECRET (or secret file) and a Clawdbot gateway token. Do not provide these credentials unless you trust the source. - Audit the code: Review the bridge (bridge.mjs), card (send.js + handle_event.js), and bitable scripts. Pay special attention to: - Hard-coded tokens (remove or rotate them). The feishu-bitable scripts include a hard-coded appToken — treat it as suspicious and do not reuse it. - Child-process usage: handle_event.js uses execSync with interpolated event data; this can be exploited if an attacker controls event contents. Prefer calling the send logic programmatically rather than using a shell command. - Files read/written: scripts read ~/.clawdbot/clawdbot.json and secret files. Inspect those configs and ensure they do not contain extra secrets you don't want accessible. - Test in isolation: Run these skills in a sandboxed or disposable environment (non-production machine or VM) first. Do not run the bridge as a persistent service until you've audited it. - Least privilege: Create a dedicated Feishu self-built app with minimal permissions required by the features you need and a dedicated Clawdbot gateway token/account; avoid using high-privilege tokens across other services. - Remove autostart until reviewed: The setup-service script will install a launchd agent; do not load it until you have inspected and are confident in the code. - If unsure, prefer installing only specific sub-skills you need (and inspect their package.json and code) rather than bulk-installing the entire kit. If you want, I can (a) point out the exact lines to change to remove shell exec usage, (b) highlight hard-coded tokens and suggest fixes, or (c) produce a short checklist for a code audit to run before enabling the bridge.

Type: OpenClaw Skill Name: feishu-skills-kit Version: 1.0.0 The skill bundle is classified as suspicious due to a shell injection vulnerability in `skills/feishu-card/handle_event.js` where user-controlled input (`menuKey`) is directly interpolated into an `execSync` command. Additionally, `skills/feishu-bridge/setup-service.mjs` creates a macOS launchd plist for persistence, and `skills/feishu-bridge/bridge.mjs` and `skills/feishu-memory-recall/index.js` read sensitive local configuration files (e.g., `~/.clawdbot/clawdbot.json` for gateway tokens, `~/.clawdbot/secrets/feishu_app_secret`, `~/.openclaw/agents/main/sessions/sessions.json`). While these capabilities are necessary for the stated purpose and `skills/feishu-card/send.js` includes a `scanForSecrets` function to prevent credential leakage, the direct shell injection vulnerability and the powerful persistence/sensitive file access capabilities warrant a 'suspicious' classification.