← Back to Skills Marketplace
177
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install feishu-send-message-as-app
Description
Send a Feishu IM message as the app (bot identity). Use when you need to send a message that appears to come from the bot/app, not the user. Uses App Access...
README (SKILL.md)
Feishu Send Message as App
Send a Feishu IM message with app/bot identity — not user identity.
Usage
bash \x3Cskill-dir>/scripts/send-message.sh \x3Creceive_id> \x3Cmsg_type> \x3Ccontent> [open_id|chat_id]
Examples
# Text message
bash \x3Cskill-dir>/scripts/send-message.sh ou_xxx text "Hello"
# Image message (use image_key from feishu-upload-image)
bash \x3Cskill-dir>/scripts/send-message.sh ou_xxx image '{"image_key":"img_v3_xxx"}'
# Post message (rich text)
bash \x3Cskill-dir>/scripts/send-message.sh ou_xxx post '{"zh_cn":{"title":"Title","content":[[{"tag":"text","text":"Hello"}]]}}'
# To a group chat
bash \x3Cskill-dir>/scripts/send-message.sh oc_xxx text "Hello" chat_id
Environment variables
export FEISHU_RECEIVE_ID="ou_xxx"
export FEISHU_MSG_TYPE="text"
export FEISHU_CONTENT="Hello"
bash \x3Cskill-dir>/scripts/send-message.sh
Workflow with feishu-upload-image
# 1. Upload image → get image_key
IMAGE_KEY=$(bash \x3Cfeishu-upload-image-dir>/scripts/upload-image.sh /path/to/image.png)
# 2. Send as app
bash \x3Cskill-dir>/scripts/send-message.sh ou_xxx image "{\"image_key\":\"$IMAGE_KEY\"}"
Output
message_id: om_xxxxxxxxxxxxxxxx
Credentials
Reads appId and appSecret from openclaw.json at channels.feishu.
Usage Guidance
This skill's code does what it says (gets an app token and posts to Feishu), but the registry metadata fails to declare that it reads appId/appSecret from an openclaw.json file (default /root/.openclaw/openclaw.json). Before installing: (1) confirm where your Feishu app credentials are stored and whether you want this skill to read that file; (2) ensure the openclaw.json file permissions are restrictive and that you trust the skill's origin; (3) be aware the script caches the app token in /tmp (may be readable by other users on the host); (4) review the script locally to ensure it matches your expectations and consider testing in an isolated environment. If you need higher assurance, ask the publisher to update registry metadata to declare the required config path and to explain token caching behavior.
Capability Analysis
Type: OpenClaw Skill
Name: feishu-send-message-as-app
Version: 1.0.0
The skill is a legitimate tool for sending Feishu messages via a bot identity. It retrieves credentials from a local configuration file (`/root/.openclaw/openclaw.json`) and communicates exclusively with official Feishu API endpoints (open.feishu.cn). No evidence of data exfiltration, malicious execution, or prompt injection was found in scripts/send-message.sh or SKILL.md.
Capability Assessment
Purpose & Capability
The skill's purpose (send Feishu messages as the app) matches the included script. However the registry metadata declares no required credentials or config paths while SKILL.md and the script read appId and appSecret from openclaw.json (default /root/.openclaw/openclaw.json). The omission in metadata is an inconsistency that could hide sensitive file access.
Instruction Scope
SKILL.md and scripts instruct the agent to read credentials from openclaw.json, call Feishu API endpoints, and cache an app token in /tmp/feishu_app_token.cache. The instructions stay within the Feishu API domain, but they reference and read a local config file that was not declared in the registry, which expands scope beyond what's advertised.
Install Mechanism
No install spec; this is an instruction-only skill with a small included shell script. Nothing is downloaded or written during install beyond the script itself.
Credentials
Registry lists no required environment variables or primary credential, yet the script requires appId/appSecret (read from openclaw.json) and supports optional FEISHU_* env vars for convenience. Requesting access to local stored credentials without declaring them is disproportionate to the metadata and should be justified.
Persistence & Privilege
The skill is not marked always:true and does not modify other skills. It writes a cached app token to /tmp/feishu_app_token.cache (temporary, potentially world-readable) but otherwise does not request persistent elevated privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install feishu-send-message-as-app - After installation, invoke the skill by name or use
/feishu-send-message-as-app - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: send Feishu IM messages with bot/app identity using App Access Token
Metadata
Frequently Asked Questions
What is Feishu Send Message as App?
Send a Feishu IM message as the app (bot identity). Use when you need to send a message that appears to come from the bot/app, not the user. Uses App Access... It is an AI Agent Skill for Claude Code / OpenClaw, with 177 downloads so far.
How do I install Feishu Send Message as App?
Run "/install feishu-send-message-as-app" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Feishu Send Message as App free?
Yes, Feishu Send Message as App is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Feishu Send Message as App support?
Feishu Send Message as App is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Feishu Send Message as App?
It is built and maintained by jkzleond (@jkzleond); the current version is v1.0.0.
More Skills