← Back to Skills Marketplace
hashstacs-hk

feishu-quick-setup

by HashSTACS-HK · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
121
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install feishu-quick-setup
Description
One-click Feishu bot creation. Uses the Feishu App Registration API (Device Flow) to create a new Feishu Bot and save credentials to the OpenClaw config file...
README (SKILL.md)

feishu-quick-setup

Module compatibility: Scripts are provided in both .js and .mjs. Prefer .mjs; if you get a module error, fall back to .js.

Create a Feishu Bot for the user by executing the commands below step by step. All script output is single-line JSON.

Runtime

  • Command: node
  • Resolve script paths relative to this SKILL.md directory to absolute paths before execution.

Steps

Step 1 — Check existing config

node "{script_dir}/quick-setup.mjs" --status
Field Action
configured: true Tell the user Feishu is already configured (show appId), ask if they want to reconfigure
configured: false Proceed to Step 2

Step 2 — Start registration

node "{script_dir}/quick-setup.mjs" --begin --domain "feishu"
  • --domain: feishu (mainland China, default) or lark (international)
  • On error: false — you get verificationUrl and deviceCode. Proceed to Step 3.
  • On error: true — show the error message to the user and stop.

Step 3 — Show the link

Display the verificationUrl from Step 2 to the user as-is:

请点击以下链接完成飞书授权: {verificationUrl}

点击后在飞书中点击"确认创建"即可。

The correct link format is https://open.feishu.cn/page/openclaw?user_code=.... Do not modify or reconstruct the URL. This flow uses a link, not a QR code.

After showing the link, proceed directly to Step 4 (no need to wait for user reply).

Step 4 — Poll for completion

node "{script_dir}/quick-setup.mjs" --poll --wait --timeout 300

The script polls internally every 5 seconds until the user completes authorization or the timeout (default 5 min) is reached.

Result Action
status: "completed" Take appId and appSecret from the response, proceed to Step 5
status: "error", expired_token Link expired — restart from Step 2
status: "error", access_denied User denied the request — inform the user
status: "timeout" Timed out — suggest the user retry

Step 5 — Save config

node "{script_dir}/quick-setup.mjs" --save --app-id "APP_ID" --app-secret "APP_SECRET" --domain "feishu"

Replace APP_ID and APP_SECRET with the values from Step 4.

Result Action
success: true Show the message field from the response to the user (it contains next-step instructions and a permissions link)
success: false Show the failure reason to the user

Notes

  • Always use the commands above; do not call Feishu APIs directly or construct URLs manually.
  • This skill creates a new app. For user-level OAuth on an existing app, use feishu-auth instead.
  • Execute each step — do not skip steps or only describe them.
  • Always show the verificationUrl exactly as returned by the script.
Usage Guidance
This skill appears to do what it claims: run local node scripts that talk to Feishu/Lark and store the created appId/appSecret in ~/.openclaw/openclaw.json. Before installing or running it: 1) Ensure you have a recent Node runtime available (SKILL.md uses 'node' but the registry metadata didn't list it). 2) Inspect the bundled scripts (they are included) and confirm you trust them; they only call accounts.feishu.cn / accounts.larksuite.com and write to your OpenClaw config and a .pending.json file. 3) Back up your existing ~/.openclaw/openclaw.json (the script makes a .bak for existing files but you may want your own backup). 4) Remember appSecret is stored in cleartext in openclaw.json; consider filesystem permissions and whether that's acceptable. 5) If you plan to let an autonomous agent invoke this skill, be aware it will execute the bundled node scripts with whatever filesystem/network permissions the agent process has. If any of these items concern you, run the scripts manually instead of allowing the agent to run them autonomously.
Capability Analysis
Type: OpenClaw Skill Name: feishu-quick-setup Version: 1.0.2 The feishu-quick-setup skill is designed to automate the creation of a Feishu bot using the official Feishu App Registration (Device Flow) API. The scripts (quick-setup.mjs/js) interact with legitimate Feishu and Lark domains (accounts.feishu.cn and accounts.larksuite.com) to obtain credentials and then save them to the local OpenClaw configuration file (~/.openclaw/openclaw.json). The logic is transparent, lacks obfuscation, and performs file/network operations that are strictly necessary for its stated purpose without any signs of data exfiltration or malicious intent.
Capability Tags
requires-oauth-token
Capability Assessment
Purpose & Capability
The skill name, description, SKILL.md, and included JS/MJS scripts all align: they start a device-flow registration with Feishu/Lark, poll for completion, and save appId/appSecret to the OpenClaw config. Minor incoherence: SKILL.md and scripts require running 'node' but the registry metadata declares no required binaries. The missing 'node' declaration is an oversight but not evidence of malicious intent.
Instruction Scope
SKILL.md explicitly instructs the agent to run the provided node scripts step-by-step and to display the verificationUrl exactly as returned. The instructions do not ask the agent to read unrelated files or exfiltrate arbitrary data. The scripts do read/write only the OpenClaw config and a local .pending.json file (documented in code), which is consistent with the skill's purpose.
Install Mechanism
There is no external install spec or remote download; all code is bundled with the skill (JS/MJS). That keeps install risk low. The scripts will be executed locally; no archives or external binaries are fetched by the skill itself.
Credentials
The skill requests no environment variables or external credentials, which is appropriate. It does write sensitive secrets (appSecret) into the user's OpenClaw config (~/.openclaw/openclaw.json) in cleartext — this is expected for its function but is a sensitive action users should be aware of. The code also writes a .pending.json file next to the scripts to persist device_code state.
Persistence & Privilege
The skill is not always-enabled and does not request elevated system-wide privileges. It modifies only the OpenClaw config (its intended target) and creates a local pending file; it does not alter other skills or global agent settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install feishu-quick-setup
  3. After installation, invoke the skill by name or use /feishu-quick-setup
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
feishu-quick-setup 1.0.2 - Improved English documentation for better clarity and consistency. - Provided clearer step-by-step instructions, including example commands and expected outputs. - Clarified that all script outputs are JSON and command paths should be resolved absolutely. - Explicitly stated not to use QR codes or reconstruct URLs, emphasizing use of returned verificationUrl. - Aligned terminology, emphasizing the difference between Feishu app creation and OAuth authorization.
v1.0.1
- 文档描述优化,更简洁明了,突出「无需自行编写代码或调用 API」。 - 禁止事项调整为注意事项,表述更温和且有指导性。 - 强调命令执行顺序和原样展示 verificationUrl 的重要性。 - 移除了对“二维码或扫码”的相关表述,明确仅通过链接完成注册流程。 - 明确建议每一步都需实际执行命令而非仅描述流程。
v1.0.0
feishu-quick-setup 1.0.0 - Initial release of the feishu-quick-setup skill for one-click Feishu app configuration. - Guides users through interactive CLI steps to create a Feishu Bot and update OpenClaw config. - Detects existing configuration and offers to re-configure if desired. - Securely registers new Feishu app via official App Registration API; does not use user OAuth. - Prevents manual URL/API manipulation to ensure correct setup flow.
Metadata
Slug feishu-quick-setup
Version 1.0.2
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is feishu-quick-setup?

One-click Feishu bot creation. Uses the Feishu App Registration API (Device Flow) to create a new Feishu Bot and save credentials to the OpenClaw config file... It is an AI Agent Skill for Claude Code / OpenClaw, with 121 downloads so far.

How do I install feishu-quick-setup?

Run "/install feishu-quick-setup" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is feishu-quick-setup free?

Yes, feishu-quick-setup is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does feishu-quick-setup support?

feishu-quick-setup is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created feishu-quick-setup?

It is built and maintained by HashSTACS-HK (@hashstacs-hk); the current version is v1.0.2.

💬 Comments