← Back to Skills Marketplace
josephyb97

feishui-file-sender

by Josephyb97 · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
666
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install feishui-file-sender
Description
Send files via Feishu channel using message tool with filePath parameter.
README (SKILL.md)

Feishu File Sender

Send binary files (ZIP, PDF, images, etc.) to Feishu groups or users.

Prerequisites

  • OpenClaw configured with Feishu channel
  • Target chat ID (group or user)

Step 1: Package the Skill/File

cd /root/.openclaw/workspace/skills
zip -r /tmp/skill_name.zip skill_folder/

Key: Use relative path inside the zip, not absolute path.

Step 2: Send via Feishu

message(
    action="send",
    channel="feishu",
    filePath="/tmp/skill_name.zip",
    message="📦 Skill Name",
    target="oc_xxxxxxxxxxxx"  # chat ID
)

Parameters

Parameter Type Required Description
action string Yes "send"
channel string Yes "feishu"
filePath string Yes Absolute path to file
message string Yes Caption text
target string Yes Chat ID (oc_xxx for groups, user ID for DM)

Common Issues

  1. File too large: Feishu limits apply (~20MB for most)
  2. Wrong path: Use absolute path /tmp/xxx.zip
  3. Relative path in zip: Package from parent dir, e.g., zip -r /tmp/out.zip folder/

Example: Send a Skill

# Package
cd /root/.openclaw/workspace/skills
zip -r /tmp/weather.zip weather/

# Send
message(action="send", channel="feishu", filePath="/tmp/weather.zip", message="📦 weather skill", target="oc_group_id")
Usage Guidance
This skill will let the agent package files from the agent workspace and send them to a Feishu chat using the platform's messaging capability. That is coherent with its description, but it is also a straightforward channel for data exfiltration if misused. Before installing or enabling it: (1) Confirm the Feishu channel and destination chat ID are trusted and under your control; (2) Avoid allowing the agent to zip or send directories that may contain secrets (API keys, private keys, credentials, logs); (3) Require explicit, human-confirmed file paths and a checklist of what will be sent rather than allowing arbitrary paths; (4) Inspect or lock down the implementation of the message(...) tool to ensure it enforces sender policies/rate limits and logs actions; (5) Prefer running this skill in a restricted test environment first. If you cannot enforce those safeguards, do not enable this skill for autonomous use.
Capability Analysis
Type: OpenClaw Skill Name: feishui-file-sender Version: 1.0.0 The `SKILL.md` file instructs the AI agent to `cd` into `/root/.openclaw/workspace/skills` and use the `zip` command to package directories. The skill then uses the `message` tool with a `filePath` parameter that accepts absolute paths. This combination, while intended for sending other skills, creates a significant prompt injection vulnerability. An attacker could potentially instruct the agent to zip and exfiltrate arbitrary sensitive files or directories (e.g., `/etc`, `~/.ssh`, or other skill data) by manipulating the `zip` command's target or the `filePath` parameter. This grants a high-risk capability that could be abused, but the provided files do not show explicit malicious intent to self-exploit or exfiltrate unrelated data.
Capability Assessment
ℹ Purpose & Capability
Name/description (send files to Feishu) align with the instructions: the SKILL.md shows how to package a skill folder and call message(..., channel='feishu', filePath=...). However the instructions specifically target /root/.openclaw/workspace/skills (agent internal workspace), which expands the capability beyond a generic 'send a chosen file' scenario and is worth calling out.
⚠ Instruction Scope
The SKILL.md tells the agent to run shell commands that read and zip files from the agent's workspace (/root/.openclaw/workspace/skills) and then to call message(...) with an absolute filePath. This explicitly instructs reading local agent files and transmitting them to an external Feishu target. There are no constraints, confirmation steps, or sanitization rules — the agent could be directed to package and send any files inside the workspace (which may include secrets). That broad I/O and transmission behavior is the main risk.
✓ Install Mechanism
Instruction-only skill with no install spec and no code files — nothing written to disk by an installer. This minimizes installation risk.
ℹ Credentials
The skill declares no required environment variables or credentials, which is expected because it relies on the OpenClaw 'message' tool and the platform's configured Feishu channel. However, that means the skill implicitly uses the agent's Feishu credentials to transmit files; the lack of any explicit credential declaration is not wrong but you should verify the channel configuration and who controls the destination chat ID.
✓ Persistence & Privilege
always:false and no install or code that modifies agent configuration are present. The skill does not request permanent presence or elevated privileges beyond invoking the message/send flow at runtime.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install feishui-file-sender
  3. After installation, invoke the skill by name or use /feishui-file-sender
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
feishu-file-sender 1.0.0 - Initial release. - Allows sending binary files via Feishu channel using the message tool with a filePath parameter. - Supports targeting both Feishu groups and users. - Includes usage instructions, parameter descriptions, and troubleshooting tips.
Metadata
Slug feishui-file-sender
Version 1.0.0
License —
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is feishui-file-sender?

Send files via Feishu channel using message tool with filePath parameter. It is an AI Agent Skill for Claude Code / OpenClaw, with 666 downloads so far.

How do I install feishui-file-sender?

Run "/install feishui-file-sender" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is feishui-file-sender free?

Yes, feishui-file-sender is completely free (open-source). You can download, install and use it at no cost.

Which platforms does feishui-file-sender support?

feishui-file-sender is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created feishui-file-sender?

It is built and maintained by Josephyb97 (@josephyb97); the current version is v1.0.0.

More Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463815 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259802 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200680 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191345 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190333 · by oswalpalash

💬 Comments