Wcs Helper Feishu Skill

Configure OpenClaw Feishu plugin without editing config files. Send simple commands via Feishu private chat to toggle streaming, set group reply behavior, ru...

This skill appears to implement the advertised Feishu/OpenClaw configuration helpers, but its manifest understates what it needs. Before installing: 1) Inspect ~/.openclaw/openclaw.json — it will be read to obtain Feishu appId/appSecret; ensure you trust the source and that the file contains only expected credentials. 2) Be aware the skill will call the local 'openclaw' CLI and 'pgrep' and may restart the OpenClaw gateway; ensure the runtime user has permission for these operations. 3) The package caches a Feishu tenant token in /tmp/feishu_card_token.json. 4) If you require stronger assurance, run the skill in a test environment first or review/modify the code to limit which commands are executed (e.g., remove or gate restart/autofix actions). The issues are likely sloppy metadata rather than malicious behavior, but verify the OpenClaw config contents and the author's trustworthiness before granting it access to a production instance.

Type: OpenClaw Skill Name: wcs-helper-feishu-skill Version: 1.0.1 The skill is designed to manage OpenClaw's Feishu plugin configuration but exhibits several high-risk behaviors and security vulnerabilities. It reads sensitive credentials (appId, appSecret) from the local filesystem and executes system commands via subprocess. Notably, src/utils.py contains a shell injection vulnerability by using subprocess.run(shell=True) on command strings. Additionally, feishu_handler.py stores sensitive access tokens in /tmp/feishu_card_token.json, which is typically world-readable, and skill.py executes CLI commands based on user-provided input strings. While these actions are aligned with the stated purpose of a configuration helper, the lack of input sanitization and insecure credential handling pose a significant risk.