← 返回 Skills 市场
117
总下载
0
收藏
1
当前安装
3
版本数
在 OpenClaw 中安装
/install feishu-assistant
功能描述
飞书助手，用于发送图片到飞书平台。当用户需要将生成的图片发送到飞书（私聊或群聊）时使用此技能。支持通过 user_id、open_id 或 chat_id 发送图片。
使用说明 (SKILL.md)
Feishu Assistant
发送图片到飞书平台（私聊或群聊）。
凭证配置（0配置，开箱即用）
✅ 推荐：OpenClaw 主配置（无需任何操作）
如果你的 OpenClaw 已经配置了飞书机器人，自动读取，无需任何操作。
技能会级联读取飞书凭证，优先级：
- 环境变量
FEISHU_APP_ID/FEISHU_APP_SECRET - OpenClaw 主配置
~/.openclaw/openclaw.json中的飞书配置 - 以上都没有 → 脚本会报"未配置飞书凭证"错误
获取飞书配置
- 访问 https://open.feishu.cn/ 创建企业自建应用
- 获取 App ID 和 App Secret
- 开启权限：
im:message:send_as_bot - 将应用添加到群聊（获取 chat_id）
使用方法
发送图片到群聊
python3 scripts/send_image.py /path/to/image.png --chat-id chat_xxxxx
发送图片到用户（私聊）
# 通过 user_id
python3 scripts/send_image.py /path/to/image.png --user-id u_xxxxx
# 通过 open_id
python3 scripts/send_image.py /path/to/image.png --open-id o_xxxxx
回复某条消息（发送到同一对话）
python3 scripts/send_image.py /path/to/image.png --message-id oxxxxxx
获取 ID 的方法
| ID 类型 | 格式 | 获取方式 |
|---|---|---|
| 群聊 ID | chat_xxxxx |
飞书群设置 → 群机器人 → 复制 Chat ID |
| 用户 ID | u_xxxxx |
企业内部用户 ID，通过 API 或管理后台获取 |
| Open ID | o_xxxxx |
开放平台用户 ID，可通过机器人获取 |
| 消息 ID | o_xxxxx |
消息事件中携带的 message_id |
集成其他技能
当用户说"发送到飞书"或"发到群里"时，调用此技能发送图片。
脚本路径：
skills/feishu-assistant/scripts/send_image.py
安全使用建议
This skill's code does what it says (uploads and sends images to Feishu), but it will look for FEISHU_APP_ID / FEISHU_APP_SECRET or read your ~/.openclaw/openclaw.json even though the registry metadata claims 'no required config'. Before installing, review and confirm you are comfortable with the skill reading your OpenClaw config and providing it Feishu credentials. Consider: (1) Inspect ~/.openclaw/openclaw.json to see what will be read; (2) Prefer setting FEISHU_APP_ID/FEISHU_APP_SECRET in a dedicated environment rather than relying on a global OpenClaw config; (3) If you have sensitive credentials in your OpenClaw config, avoid granting this skill access or run it in an isolated account/environment; (4) Optionally run the script locally first to validate behaviour and network calls, and ensure you trust the skill owner before giving it production credentials.
功能分析
Type: OpenClaw Skill
Name: feishu-assistant
Version: 1.1.1
The feishu-assistant skill is a legitimate tool for sending images to the Feishu platform. The script `scripts/send_image.py` correctly implements its stated functionality, including credential management from environment variables or the local `~/.openclaw/openclaw.json` config, image type validation using magic bytes, and rate limiting. No evidence of data exfiltration, malicious execution, or prompt injection was found.
能力评估
Purpose & Capability
The name/description (send images to Feishu) matches the included script: it uploads an image and sends or replies to messages via the official open.feishu.cn API endpoints. Needing an App ID/App Secret is expected for this capability, but the registry metadata lists no required env vars or primary credential — that's inconsistent with the actual code and SKILL.md.
Instruction Scope
SKILL.md and scripts instruct the agent to auto-read credentials from environment variables or from the OpenClaw main config at ~/.openclaw/openclaw.json. This is reasonable for convenience, but the instructions give the skill implicit permission to read a user’s global OpenClaw config (not declared in metadata) which may contain other channels/credentials. The script only calls Feishu endpoints (no other external endpoints) and only uploads the provided image, so there is no obvious exfiltration to unknown domains.
Install Mechanism
There is no install spec (instruction-only plus a small Python script). Nothing is downloaded from external or untrusted URLs. The script uses the requests library which may need to be present in the runtime environment but no installer is provided — low install-surface risk.
Credentials
The code requires FEISHU_APP_ID and FEISHU_APP_SECRET (or the OpenClaw config file) to operate, which is appropriate for a Feishu integration. However the skill metadata declares 'Required env vars: none' and 'Required config paths: none' while the runtime instructions and script explicitly read those values. This mismatch is the main proportionality concern because the skill will access user credentials/config without that being declared in the registry metadata.
Persistence & Privilege
The skill is not marked always:true, does not modify other skills or system-wide settings, and does not persist new credentials beyond reading them. Autonomous invocation is allowed (platform default) but combined with the above undeclared credential access it increases the need for caution.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install feishu-assistant - 安装完成后，直接呼叫该 Skill 的名称或使用
/feishu-assistant触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.1
安全更新：新增文件类型magic bytes校验；新增滑动窗口频率限制（60秒最多30次）
v1.1.0
安全修复：移除硬编码凭证，改为环境变量/OpenClaw配置级联读取；添加.clawhubignore保护
v1.0.0
初始版本：支持发送图片到飞书私聊/群聊
元数据
常见问题
Feishu Assistant 是什么？
飞书助手，用于发送图片到飞书平台。当用户需要将生成的图片发送到飞书（私聊或群聊）时使用此技能。支持通过 user_id、open_id 或 chat_id 发送图片。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 117 次。
如何安装 Feishu Assistant？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install feishu-assistant」即可一键安装，无需额外配置。
Feishu Assistant 是免费的吗？
是的，Feishu Assistant 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Feishu Assistant 支持哪些平台？
Feishu Assistant 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Feishu Assistant？
由 kinggu（@gushenjie）开发并维护，当前版本 v1.1.1。
推荐 Skills