← Back to Skills Marketplace
506
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install feishu-meeting
Description
Create Feishu (Lark) video meetings via Calendar API — instant, scheduled, or recurring. Supports multiple invitees (resolved from mobile/email), automatic F...
README (SKILL.md)
Feishu Meeting
Create Feishu video meetings with one command. Meetings appear in attendees' calendars with auto-generated VC links.
Prerequisites
Feishu app permissions (enable in Feishu Open Platform console):
calendar:calendar— Read/write calendarsvc:reserve— Reserve meetingscontact:user.id:readonly— Resolve mobile/email to user IDs
The app must have bot capability enabled.
Configuration
Before first use, set these values in scripts/create.sh:
DEFAULT_OWNER_OPEN_ID— Open ID of the default meeting owner (required)CALENDAR_ID— The bot's primary calendar ID (run the discovery command below)
Discover Calendar ID
# After configuring Feishu appId/appSecret in openclaw.json:
curl -s "https://open.feishu.cn/open-apis/calendar/v4/calendars" \
-H "Authorization: Bearer $TOKEN" | python3 -c "
import json,sys
for c in json.load(sys.stdin)['data']['calendar_list']:
print(f\"{c['calendar_id']} {c['type']} {c['summary']}\")"
Use the primary calendar ID.
Usage
scripts/create.sh "Topic" # Instant (5min from now)
scripts/create.sh "Topic" --start "2026-03-10 14:00" --duration 60 # Scheduled
scripts/create.sh "Topic" --invitee "13800138000" # With invitee
scripts/create.sh "Topic" --invitee "[email protected]" --invitee "138..." # Multiple
scripts/create.sh "Topic" --rrule "FREQ=WEEKLY;BYDAY=WE;COUNT=8" # Recurring
Options
| Flag | Description | Default |
|---|---|---|
--invitee \x3Cmobile|email> |
Add invitee (repeatable) | Owner only |
--start \x3Cdatetime> |
Start time "YYYY-MM-DD HH:MM" |
Now + 5 min |
--duration \x3Cmin> |
Duration in minutes | 60 |
--rrule \x3Crule> |
RFC 5545 recurrence rule | None |
Positional args after topic are treated as invitees for convenience.
RRULE Examples
| Pattern | RRULE |
|---|---|
| Every Monday | FREQ=WEEKLY;BYDAY=MO;COUNT=52 |
| Every weekday | FREQ=WEEKLY;BYDAY=MO,TU,WE,TH,FR;COUNT=52 |
| Biweekly Wednesday | FREQ=WEEKLY;INTERVAL=2;BYDAY=WE;COUNT=26 |
| Monthly 1st Friday | FREQ=MONTHLY;BYDAY=1FR;COUNT=12 |
| Daily for 5 days | FREQ=DAILY;COUNT=5 |
Important: Feishu requires COUNT or UNTIL in recurrence rules. The script auto-appends COUNT=52 if neither is present.
How It Works
- Gets
tenant_access_tokenfrom Feishu app credentials - Creates a calendar event with
vchat.vc_type: "vc"(auto-generates Feishu VC link) - Resolves invitee mobiles/emails → open_ids via
batch_get_id - Adds attendees to the calendar event (they see it in their Feishu calendar)
Troubleshooting
| Error | Cause | Fix |
|---|---|---|
99991672 |
Missing permission | Enable the required scope in app console |
190002 invalid parameters |
Bad RRULE or timestamp | Ensure RRULE has COUNT/UNTIL; timestamps are Unix seconds |
| Invitee not found | User not in app's visibility scope | Add user to app's contact scope, or share link manually |
121003 param error on reserves API |
Wrong field in payload | Don't pass invitees to /vc/v1/reserves/apply — it doesn't exist |
Usage Guidance
This script does what it claims (creates Feishu calendar events and VC links) but it requires Feishu app credentials and owner/calendar identifiers that were not declared in the skill metadata. Before running: 1) Inspect /root/.openclaw/openclaw.json (or the file set in OPENCLAW_CONFIG) to confirm it only contains the expected Feishu appId/appSecret and no unrelated secrets you don't want read by this script. 2) Set FEISHU_MEETING_OWNER_ID and FEISHU_MEETING_CALENDAR_ID (or edit the script's configuration block) rather than running as root or with a config that holds other credentials. 3) Verify the Feishu app has only the minimal scopes listed in SKILL.md. 4) If you cannot verify the openclaw.json contents or prefer stricter isolation, extract the Feishu appId/appSecret into a separate config file and set OPENCLAW_CONFIG to that file, run the script in an isolated environment, or run the API calls yourself. The current mismatch between declared requirements and what the script actually reads is the main reason to treat this as suspicious rather than benign.
Capability Analysis
Type: OpenClaw Skill
Name: feishu-meeting
Version: 1.0.0
The skill is classified as suspicious due to multiple critical vulnerabilities in `scripts/create.sh`. User-controlled inputs such as `MEETING_TOPIC`, `RRULE`, and `START_TIME` are directly interpolated into `python3 -c` commands and a `date -d` command without proper sanitization. This allows for potential Python code injection and shell injection, which could lead to arbitrary code execution (RCE) on the agent's host system. While the skill's stated purpose (creating Feishu meetings) is benign, these vulnerabilities pose a significant security risk. There is no evidence of intentional malicious behavior like data exfiltration or backdoor installation.
Capability Assessment
Purpose & Capability
The script behavior (creating calendar events, reserving VC links, resolving users) matches the stated purpose. However the registry metadata lists no required credentials or config paths while the script clearly needs Feishu appId/appSecret (from openclaw.json) and expects FEISHU_MEETING_OWNER_ID and FEISHU_MEETING_CALENDAR_ID environment variables — this mismatch is unexpected and should have been declared.
Instruction Scope
SKILL.md and the script stay within the domain of scheduling Feishu meetings and call only Feishu endpoints. The instructions do require you to populate app credentials in openclaw.json and to set owner/calendar identifiers, which the SKILL.md mentions in prose but the skill metadata did not enumerate as required—so runtime instructions access agent config files that were not declared in the registry metadata.
Install Mechanism
No install spec; this is an instruction-only skill with a small shell script. Nothing is downloaded from remote URLs and no archive extraction occurs. Risk from installation is low; primary risk comes from executing the provided script.
Credentials
The skill needs sensitive credentials (Feishu appId/appSecret) and environment vars (FEISHU_MEETING_OWNER_ID, FEISHU_MEETING_CALENDAR_ID / or editing the script). The registry metadata declared no required env vars or config paths, and did not set a primary credential — this omission is a red flag because the script reads the agent config file (/root/.openclaw/openclaw.json by default) to obtain the app credentials.
Persistence & Privilege
The skill is not always-enabled and does not modify other skills or system-wide configuration. It only reads an existing OpenClaw config file and uses network calls to Feishu APIs; it does not persist new credentials or alter agent settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install feishu-meeting - After installation, invoke the skill by name or use
/feishu-meeting - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Feishu Meeting?
Create Feishu (Lark) video meetings via Calendar API — instant, scheduled, or recurring. Supports multiple invitees (resolved from mobile/email), automatic F... It is an AI Agent Skill for Claude Code / OpenClaw, with 506 downloads so far.
How do I install Feishu Meeting?
Run "/install feishu-meeting" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Feishu Meeting free?
Yes, Feishu Meeting is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Feishu Meeting support?
Feishu Meeting is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Feishu Meeting?
It is built and maintained by magicaldd (@magicaldd); the current version is v1.0.0.
More Skills