Complete one-time Feishu browser authorization and cache a local `user_access_token` so later `feishu-bitable-sync` runs can write Bitable rows as the curren...

This skill appears to do exactly what it says (perform Feishu OAuth in a browser and cache a user token), but there are a few things you should verify before installing: - Provide FEISHU_APP_ID and FEISHU_APP_SECRET: SKILL.md/README require these, but the registry metadata doesn't declare them — ensure you only set credentials you trust to this skill and that you understand which app is being authorized. - Inspect skill_runtime.feishu_auth: runtime.py delegates OAuth work to skill_runtime.feishu_auth (not included here). Review that module's code (network endpoints it calls, where it stores tokens, and whether it transmits tokens anywhere) before running the skill. - Confirm callback behavior and local server: the skill opens your browser and listens on 127.0.0.1:14578/callback. Ensure that port is acceptable in your environment and that nothing else sensitive will be exposed. - Confirm token storage location: tokens are cached under ~/.codex/feishu-auth/content-system-sync.json. If you have policies about where credentials may be stored, verify or change this path. - Dependency handling: README mentions a requirements.txt; the package doesn't include dependencies. Make sure the runtime environment provides the expected dependencies or install them from trusted sources. If you can't review skill_runtime.feishu_auth or confirm the app credentials and storage behavior, do not install or run the skill. If you do proceed, run it in a controlled environment and monitor network traffic during the authorization to ensure tokens are not sent to unexpected endpoints.

Type: OpenClaw Skill Name: feishu-user-auth Version: 1.0.0 The skill implements a standard OAuth2 authorization flow for Feishu, allowing an agent to obtain and cache user tokens locally. It uses a local loopback address (127.0.0.1:14578) for the authorization callback and stores credentials in a local directory (~/.codex/feishu-auth/), which is standard behavior for CLI-based authentication tools. The code in runtime.py and instructions in SKILL.md are consistent with the stated purpose and do not exhibit signs of data exfiltration, malicious execution, or prompt injection.