← Back to Skills Marketplace

Feishu Relay

Name: Feishu Relay
Author: crayfish-ai

by crayfish-ai · GitHub ↗ · v3.2.0 · MIT-0

cross-platform ⚠ suspicious

227

Downloads

Stars

Active Installs

Versions

Install in OpenClaw

/install feishu-relay

Description

Unified Feishu notification system with automatic discovery, message queue, and reliable delivery. Use when user needs to send notifications via Feishu (Lark...

README (SKILL.md)

Feishu Notifier - Core

Version: 3.0 (Safe Mode)

A minimal, safe Feishu notification bridge for OpenClaw.

What This Does

✅ Core (always available):

Send messages to Feishu via Open API
JSON structured output
Config via environment or skill config
Retry on network failure

❌ Not included by default:

No crontab installation
No systemd service setup
No global /usr/local/bin/notify link
No auto-discovery of other skills
No environment injection

Quick Start

# Configure (environment variables)
export FEISHU_APP_ID="cli_xxx"
export FEISHU_APP_SECRET="xxx"
export FEISHU_RECEIVE_ID="ou_xxx"

# Send notification
./run.sh -t "Title" -m "Message body"

Configuration

Config	Env Variable	Required	Default
appId	FEISHU_APP_ID	Yes	-
appSecret	FEISHU_APP_SECRET	Yes	-
receiveId	FEISHU_RECEIVE_ID	Yes	-
receiveIdType	FEISHU_RECEIVE_ID_TYPE	No	open_id

Usage

# Basic
./run.sh -t "Title" -m "Message"

# JSON output
./run.sh -t "Title" -m "Message" --json

# Test
./run.sh --test

Output Format

{
  "success": true,
  "message_id": "om_xxx",
  "create_time": "1234567890"
}

Safety

No secrets in logs
No system modifications
No root required for basic use
Config file: chmod 600 config.json

Usage Guidance

This package appears to be a legitimate Feishu/Lark notifier, but there are a few mismatches you should consider before installing: (1) the registry metadata claims no required env vars while the code and skill.json require FEISHU_APP_ID / FEISHU_APP_SECRET / FEISHU_RECEIVE_ID — treat these secrets like API credentials and only provide them in a trusted environment; (2) a discovery script is included that will scan your ~/.openclaw workspace and create symlinks if you run it — it does not run automatically but will modify your filesystem when invoked; (3) README mentions optional production installers (systemd/global notify) that could require sudo — those are opt-in and not present in the manifest here, but be cautious if you obtain or run them. Recommended actions: verify the skill source (skill.json points to a GitHub URL but registry homepage is missing), inspect the optional scripts before running, run the skill first in an isolated environment (container or VM), and store Feishu secrets only in a protected config file (chmod 600) or CI/secret manager rather than a world-readable file.

Capability Analysis

Type: OpenClaw Skill Name: feishu-relay Version: 3.2.0 The feishu-relay skill is a well-documented notification bridge that follows security best practices, such as masking secrets in logs and using standard libraries for network requests (lib/send.py). While it includes an opt-in discovery script (scripts/install-discovery.sh) that scans other skill directories for notification-related scripts, this behavior is transparently documented and consistent with its role as a relay. No evidence of malicious intent, data exfiltration, or prompt injection was found.

Capability Tags

cryptorequires-oauth-token

Capability Assessment

⚠ Purpose & Capability

The skill's code, SKILL.md, README and skill.json all expect Feishu credentials (FEISHU_APP_ID, FEISHU_APP_SECRET, FEISHU_RECEIVE_ID) and network access to open.feishu.cn — that matches the described purpose. However the registry summary metadata at the top of the evaluation claims “Required env vars: none” and lists no primary credential; this is inconsistent with the bundled files (skill.json and SKILL.md) which declare required env vars. Also skill.json and README mention additional opt-in production scripts that either are not present in the manifest or are only partially present (only install-discovery.sh exists).

ℹ Instruction Scope

SKILL.md instructs the agent/user to run ./run.sh and supply FEISHU_* env vars; the runtime Python reads environment variables and skill-local config files (./config.json, ~/.openclaw/skills/feishu-relay/config.json, /etc/openclaw/skills/feishu-relay/config.json) which is consistent with the instructions. The scripts/install-discovery.sh can scan ~/.openclaw workspace and create symlinks to other skills' notify scripts — SKILL.md and README state discovery is opt-in, so there's no automatic scanning by default, but the presence of this discovery script means the skill can modify filesystem state if the user runs the opt-in installer.

✓ Install Mechanism

There is no install spec or remote download; this is an instruction-only skill with local scripts. No network installs, URL downloads, or archive extraction are present in the supplied files. README references additional production install scripts (systemd, watchdog, global notify) but these are not present in the manifest — either omitted or not included, which is an inconsistency worth noting but not an active install risk.

⚠ Credentials

The required credentials are appropriate for a Feishu notifier (app id/secret and target id). However the registry metadata incorrectly lists no required env vars while the code and skill.json require sensitive secrets (FEISHU_APP_SECRET). The Python code reads several environment variables (FEISHU_APP_ID, FEISHU_APP_SECRET, FEISHU_RECEIVE_ID, FEISHU_TIMEOUT, FEISHU_MAX_RETRIES, FEISHU_RETRY_DELAY, FEISHU_SKILL_DIR and fallbacks), and also attempts to load config files from user and system locations (/etc and ~/.openclaw). Reading /etc and user config locations is understandable for skill config but increases the places secrets could be present — users should ensure only intended config files are present and protected (chmod 600).

ℹ Persistence & Privilege

The skill does not request 'always: true' and is user-invocable only. By default it performs no system modifications. Opt-in scripts (mentioned in README/skill.json) can install systemd units or global commands and would require elevated privileges if used; only scripts/install-discovery.sh is present and will create a local .discovered directory and symlinks if the user runs it. This opt-in modification capability increases risk if users run those installers without review.

How to Use

Make sure OpenClaw is installed (local or Docker)
Run the install command in chat: /install feishu-relay
After installation, invoke the skill by name or use /feishu-relay
Provide required inputs per the skill's parameter spec and get structured output

Version History

v3.2.0

- Major cleanup: removed 12 files, including extra docs and install scripts. - Added sample configuration file: config.example.json. - Core functionality unchanged—focus remains on safe Feishu notifications without system modifications. - Documentation now leans minimal; advanced and production docs removed. - No bundled scripts for cron/systemd/global installation (fully manual setup).

v3.1.0

- Added config.json for skill configuration. - Introduced health-check.sh and self-evolution.sh scripts. - Updated core scripts and libraries for better configurability. - Minor updates to documentation and metadata.

v3.0.2

v3.0.2: Production deployment guide, watchdog health monitoring

v3.0.1

v3.0.1: Rename feishu-notifier to feishu-relay consistently

v3.0.0

Safe mode v3.0.0

v2.1.1

Fix: Use local time for task scheduling

v2.1.0

Major update: Introduces auto-discovery, new installation flow, and better documentation. - Added automatic system discovery and registration for new deployments. - Introduced new commands for listing and managing registered systems. - Switched main install script to install-v2.sh. - Expanded documentation: Architecture, auto-discovery, registration, and integration guides. - Improved message typing and framework detection (e.g., Next.js, Django, etc). - Refined config and removed the old config file (feishu.env now in a fixed path).

v1.0.1

Feishu Relay 1.0.1 introduces scenario tests, reminder scripts, and improved message compatibility. - Added several scenario test scripts and examples under test/scenarios for easier validation. - Introduced timed reminder scripts and disk monitoring scripts. - Improved notification system to support special characters, line breaks, and empty content. - Updated documentation and removed deprecated notify script. - Added install script and configuration template for simpler setup.

v1.0.0

Initial release: Unified notification system with queue and retry mechanism

Metadata

Slug feishu-relay

Version 3.2.0

License MIT-0

All-time Installs 1

Active Installs 1

Total Versions 9

Frequently Asked Questions

What is Feishu Relay?

Unified Feishu notification system with automatic discovery, message queue, and reliable delivery. Use when user needs to send notifications via Feishu (Lark... It is an AI Agent Skill for Claude Code / OpenClaw, with 227 downloads so far.

How do I install Feishu Relay?

Run "/install feishu-relay" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Feishu Relay free?

Yes, Feishu Relay is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Feishu Relay support?

Feishu Relay is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Feishu Relay?

It is built and maintained by crayfish-ai (@crayfish-ai); the current version is v3.2.0.

More Skills