← Back to Skills Marketplace
ganguagua

飞书多维表格权限检查

by ganguagua · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ Security Clean
97
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install feishu-bitable-permission-checker
Description
飞书多维表格文档权限检查工具。当用户提供一个飞书多维表格(bitable)URL 或 app_token 时,自动提取【链接地址】列,逐一检查每个链接的飞书文档(docx/wiki)阅读权限,最终输出【有权限文档列表】和【无权限文档列表】。触发词:检查文档权限、批量检查权限、哪些文档我能看、多维表格链接权限检查。
README (SKILL.md)

Feishu Bitable Permission Checker

输入一个飞书多维表格,提取「链接地址」列,批量检查飞书文档阅读权限。

工作流程

Step 1:解析多维表格

支持两种输入格式:

  • 完整 URLhttps://asiainfo.feishu.cn/base/FDo4bVmnVaYRJlslJttcPwgwnfh?table=tblRjin7OM9XvEDL&view=vew3qPDrS3
  • 仅 app_tokenFDo4bVmnVaYRJlslJttcPwgwnfh(需同时提供 table_id)

从 URL 中提取:

  • app_token:第一个路径段(如 FDo4bVmnVaYRJlslJttcPwgwnfh
  • table_id:从 table= 参数获取(如 tblRjin7OM9XvEDL

Step 2:查找「链接地址」列字段 ID

调用 feishu_bitable_app_table_field 获取表结构:

feishu_bitable_app_table_field(
  action="list",
  app_token="\x3Capp_token>",
  table_id="\x3Ctable_id>"
)

在返回的 fields 数组中找到 field_name 为「链接地址」的字段,记录其 field_id

注意:如果字段名不是「链接地址」,根据实际字段名调整查询参数。

Step 3:提取所有链接地址

调用 feishu_bitable_app_table_record 获取所有记录:

feishu_bitable_app_table_record(
  action="list",
  app_token="\x3Capp_token>",
  table_id="\x3Ctable_id>",
  field_names=["员工姓名", "链接地址"],
  page_size=500
)

解析每条记录的 fields,提取:

  • 员工姓名:主键字段,用于标识文档归属
  • 链接地址:目标文档 URL(docx 或 wiki)

Step 4:批量检查文档权限

对每个链接,调用 feishu_fetch_doc 验证读取权限:

feishu_fetch_doc(doc_id="\x3Cdoc_id>")
  • doc_id 从 URL 路径段提取(docx 或 wiki token)
  • 解析返回结果:
    • success=true + message="Document fetched successfully"有权限
    • error 中包含 forBidden无权限
    • error 中包含 request trigger frequency limit限流,稍后重试

权限判断逻辑

if success == true:
    → 有权限
elif "forBidden" in error:
    → 无权限
elif "frequency limit" in error:
    → 限流,延迟3秒后重试一次
else:
    → 视为无权限

限流处理

飞书 API 有频率限制(10-20 QPS)。每个文档最多重试 2 次:

  1. 首次失败 → 等 3 秒 → 重试
  2. 重试仍失败 → 等 5 秒 → 再重试
  3. 仍失败 → 标记为无权限

每次最多并发 10 个请求,超出时拆分为多批次(间隔 1 秒)。

Step 5:输出结果

按以下格式输出:

## 权限检查结果

### ✅ 有阅读权限({n} 人)

| 序号 | 员工姓名 | 文档标题 | 链接 |
|------|----------|----------|------|
| 1 | 张三 | 标题 | [链接](url) |

### ❌ 无阅读权限({m} 人)

| 序号 | 员工姓名 | 链接 |
|------|----------|------|
| 1 | 李四 | [链接](url) |

关键约束

  1. 权限隔离:只向 owner 报告结果,不在群聊中暴露文档内容
  2. 不重复输出:同一批文档只报告一次结果,不分段重复发送
  3. 限流优先重试:限流错误不等同于无权限,必须重试
  4. URL 清洗:链接中的查询参数(如 ?from=from_copylink)不影响 doc_id 提取,只取路径段

工具依赖

  • feishu_bitable_app_table_field:查字段结构
  • feishu_bitable_app_table_record:批量读记录
  • feishu_fetch_doc:验证文档可读性

详细字段类型和 API 行为见 references/api_notes.md

Usage Guidance
This skill appears internally consistent for batch-checking Feishu/bitable document read permissions. Before installing or using it: (1) confirm how your agent/platform provides Feishu access (the skill will call feishu_* APIs using whatever connector credentials are available); ensure those credentials have only the needed scope and are from an account you expect to use for these checks; (2) be aware the skill may fetch document content to determine access—verify the implementation will not leak document contents to unintended recipients; (3) test on a small set of URLs to validate rate-limit handling and output formatting; (4) if you prefer not to expose document contents at all, ensure the platform's Feishu connector can do a lightweight permission check rather than full content fetch, or modify the workflow to avoid retrieving markdown/title.
Capability Analysis
Type: OpenClaw Skill Name: feishu-bitable-permission-checker Version: 1.0.0 The skill is a utility designed to automate the checking of Feishu document permissions from a list stored in a Bitable. It uses standard Feishu API tools (feishu_bitable_app_table_field, feishu_bitable_app_table_record, and feishu_fetch_doc) to extract document IDs and verify accessibility. The instructions in SKILL.md include privacy-conscious constraints, such as only reporting results to the owner and handling API rate limits gracefully. No indicators of data exfiltration, malicious execution, or harmful prompt injection were found.
Capability Assessment
Purpose & Capability
The name/description match the runtime instructions: the skill extracts an app_token/table_id or URL, finds the '链接地址' field, and uses Feishu-specific APIs to test read permission. There are no unrelated required binaries or environment variables. The declared tool calls (feishu_bitable_app_table_field, feishu_bitable_app_table_record, feishu_fetch_doc) are appropriate for the described task.
Instruction Scope
Instructions stay within the permission-checking use case and do not request local files or unrelated env vars. However, the chosen method for permission testing uses feishu_fetch_doc which returns document content (markdown/title); the SKILL.md states it will not expose document contents and only report permission status, but the skill will still fetch documents under whatever Feishu credentials the agent has. That behavior is coherent with the purpose but worth noting as it could expose content if implemented or used differently.
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is written to disk and no external packages are pulled during install.
Credentials
The skill declares no required env vars or primary credential, which is consistent with expecting a user-supplied app_token (from URL or input). One implicit dependency is access to a Feishu connector / agent-level credentials to execute the feishu_* calls; those credentials and scopes are not declared here. This is proportionate to the task but users should verify the connector's scope (it will be used to perform many API calls and may return document content).
Persistence & Privilege
always is false and the skill does not request persistent/enforced presence or any system-wide config changes. It does not claim to modify other skills or system settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install feishu-bitable-permission-checker
  3. After installation, invoke the skill by name or use /feishu-bitable-permission-checker
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
首发版本:批量检查多维表格中文档的阅读权限
Metadata
Slug feishu-bitable-permission-checker
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is 飞书多维表格权限检查?

飞书多维表格文档权限检查工具。当用户提供一个飞书多维表格(bitable)URL 或 app_token 时,自动提取【链接地址】列,逐一检查每个链接的飞书文档(docx/wiki)阅读权限,最终输出【有权限文档列表】和【无权限文档列表】。触发词:检查文档权限、批量检查权限、哪些文档我能看、多维表格链接权限检查。 It is an AI Agent Skill for Claude Code / OpenClaw, with 97 downloads so far.

How do I install 飞书多维表格权限检查?

Run "/install feishu-bitable-permission-checker" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is 飞书多维表格权限检查 free?

Yes, 飞书多维表格权限检查 is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does 飞书多维表格权限检查 support?

飞书多维表格权限检查 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created 飞书多维表格权限检查?

It is built and maintained by ganguagua (@ganguagua); the current version is v1.0.0.

💬 Comments