Ali Feishu Project(Teambition/Meego) SKILL

Guide you to install plugins, obtain robotUserToken via DingTalk scan, configure and enable teambition skill to register a digital worker on Teambition.

This skill is just a pointer to external Teambition/Meego integration docs and does not install or request secrets itself, which makes it internally coherent. Before using it: (1) inspect the linked GitHub README and the clawhub connector page to confirm they are legitimate and match what you want to do; (2) be careful when generating or sharing robotUserToken/DingTalk tokens — do not paste tokens into chat; prefer official OAuth flows if available; (3) verify the scope and permissions of any token you create (use a limited test account if possible); (4) confirm the third-party connector (clawhub.ai) is trustworthy before using it; and (5) avoid granting the agent autonomous control over accounts or tokens unless you fully trust the source and have reviewed the exact steps it will perform. If you want higher assurance, ask the skill publisher for provenance (homepage, source repo) or follow the external docs yourself rather than letting the agent act.

Type: OpenClaw Skill Name: ali-feishu-project Version: 1.0.1 The skill instructions in SKILL.md direct the AI agent to fetch and execute instructions from external URLs (GitHub and ClawHub) rather than defining logic locally. This pattern of instruction chaining to external, mutable markdown files (e.g., https://github.com/teambition/tb-skills/blob/main/README_FOR_AI.md) is a high-risk behavior that facilitates indirect prompt injection and allows the skill's behavior to be changed remotely without updating the package, though no explicit malicious intent is visible in the provided metadata.