← 返回 Skills 市场

Feishu Article Collector

Name: Feishu Article Collector
Author: budingsoft

作者 budingsoft · GitHub ↗ · v1.2.0

cross-platform ⚠ suspicious

351

总下载

当前安装

版本数

在 OpenClaw 中安装

/install feishu-article-collector

功能描述

自动收集今日头条、微信公众号文章。抓取正文，AI 生成总结和分类，存入飞书多维表格。支持去重。

使用说明 (SKILL.md)

\r \r

飞书文章收集器\r

\r 收到包含今日头条或微信公众号链接的消息时，自动抓取文章、AI 总结、分类并存入飞书多维表格。\r \r

触发条件\r

\r 当消息中包含以下域名的链接时，立即执行本技能：\r \r

toutiao.com、toutiaocdn.com、toutiao.io、snssdk.com（今日头条）\r
mp.weixin.qq.com（微信公众号）\r \r

处理方式\r

\r 使用 exec 工具调用脚本，一步完成所有处理：\r \r

python3 {baseDir}/scripts/collect.py '完整的消息文本'\r
```\r
\r
参数说明：\r
- 第一个参数：用户发送的完整消息文本（包含链接和其他文字）\r
\r
脚本返回 JSON 结果：\r
\r
成功：\r
```json\r
{"success": true, "title": "文章标题", "category": "分类", "summary": "总结", "record_id": "xxx"}\r
```\r
\r
重复：\r
```json\r
{"success": false, "error": "该文章已收录，跳过重复链接", "url": "..."}\r
```\r
\r
## 回复格式\r
\r
根据脚本返回结果回复用户：\r
\r
成功时：\r
> 已收录：《文章标题》\r
> 分类：xxx\r
> 总结：xxx\r
\r
重复时：\r
> 该文章已收录，无需重复保存\r
\r
失败时：\r
> 收录失败：错误原因\r
\r
## 重要：必须调用脚本\r
\r
- **严禁使用 web_fetch 抓取文章**，必须调用上面的 Python 脚本\r
- 脚本已内置抓取、总结、分类、写入的全部逻辑，不需要自己做任何处理\r
- 消息文本原样传入第一个参数，不需要自己提取 URL\r
- 如果脚本执行失败，将错误信息返回给用户即可\r
\r
## 安装后配置\r
\r
在 OpenClaw 的 `openclaw.json` 中配置环境变量：\r
\r
```json\r
{\r
  "env": {\r
    "FEISHU_APP_ID": "飞书自建应用 App ID",\r
    "FEISHU_APP_SECRET": "飞书自建应用 App Secret",\r
    "DEEPSEEK_API_KEY": "DeepSeek API Key"\r
  }\r
}\r
```\r
\r
飞书应用需开通 `bitable:app` 权限。多维表格会在首次使用时自动创建。\r

安全使用建议

This skill appears internally consistent, but review these before installing: - Network transmission: the skill fetches articles from linked websites and sends article content (and message text you pass to the script) to the DeepSeek API for summarization. Only enable this if you trust DeepSeek and the content isn't sensitive. - Feishu privileges: the skill uses FEISHU_APP_ID/FEISHU_APP_SECRET to create and write a bitable. Ensure the Feishu app has only the minimum required permissions (bitable:app) and monitor what it creates. If you need tighter control, create a dedicated Feishu app/account for this skill. - Local state: it stores metadata (app_token/table_id, etc.) in .state.json inside the scripts folder — treat that file as sensitive and protect or rotate credentials if needed. - Helper script caution: scripts/create_bitable.py contains hard-coded placeholder constants (APP_ID/APP_SECRET/USER_OPEN_ID) and includes a function to grant full access to a user; do not run it without reviewing and replacing placeholders and understanding the permission it grants. - Operational recommendation: review the two Python files line-by-line (they are included), run the skill in an isolated environment if possible, and only provide the three required env vars via the platform's secure secrets mechanism. If you are uncomfortable sending content to a third party, do not install or replace DeepSeek calls with an internal model/service.

功能分析

Type: OpenClaw Skill Name: feishu-article-collector Version: 1.2.0 The skill automates article collection from Toutiao and WeChat into Feishu Bitables using a Python script and DeepSeek AI. A security vulnerability is present in `SKILL.md`, which instructs the AI agent to execute a shell command using raw user message text as a command-line argument (`python3 ... '完整的消息文本'`). This pattern is susceptible to shell injection if the user message contains single quotes or shell metacharacters, potentially allowing arbitrary command execution. While the core logic in `scripts/collect.py` and `scripts/create_bitable.py` appears functional and aligned with the stated purpose, the unsafe instruction template poses a significant risk.

能力评估

✓ Purpose & Capability

Name/description (collect articles, AI summarize, save to Feishu) match the actual code and declared requirements: python3, FEISHU_APP_ID/FEISHU_APP_SECRET, DEEPSEEK_API_KEY. The code fetches supported domains, calls DeepSeek for summarization, and uses Feishu Open APIs to find/create a bitable and write records — all expected.

ℹ Instruction Scope

SKILL.md explicitly requires executing the included Python script with the full message text; the script extracts URLs, fetches page content from the linked domains, sends content+title to DeepSeek, and writes to Feishu. This scope is consistent with the stated purpose, but note it will transmit fetched article content (and the passed message text) to the DeepSeek API and to Feishu.

✓ Install Mechanism

Install spec only requests the 'requests' Python package (via the declared 'uv' kind). This is proportionate for a Python script that performs HTTP calls. No downloads from arbitrary URLs or archive extraction are used.

ℹ Credentials

The three required env vars (FEISHU_APP_ID, FEISHU_APP_SECRET, DEEPSEEK_API_KEY) are directly used by the code and are proportionate. Important privacy/security implication: article contents and any message text are sent to DeepSeek (third-party) for summarization, and Feishu credentials are used to create/write a bitable. The script also stores state (tokens/IDs) locally in .state.json.

ℹ Persistence & Privilege

always:false and autonomous invocation allowed (platform default). The skill creates/updates a Feishu bitable and caches state in .state.json in the script directory. create_bitable.py includes utility functions (and a grant_user_access helper) that, if run manually, may grant access scopes — but SKILL.md requires running collect.py, not arbitrary helper scripts. Persisted state and created bitable are expected for this use case but are things to review.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install feishu-article-collector
安装完成后，直接呼叫该 Skill 的名称或使用 /feishu-article-collector 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.2.0

移除 config.json 依赖，改为环境变量驱动（FEISHU_APP_ID/FEISHU_APP_SECRET/DEEPSEEK_API_KEY）；多维表格自动发现或创建，无需手动配置

v1.1.0

移除 config.json 依赖，改为环境变量驱动；多维表格自动发现或创建，无需手动配置

v1.0.0

Initial release: 支持今日头条和微信公众号文章自动收集、AI总结分类、飞书多维表格存储

元数据

Slug feishu-article-collector

版本 1.2.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 3

常见问题