← 返回 Skills 市场

Feishu Automation

Name: Feishu Automation
Author: hejk

作者 Hellen · GitHub ↗ · v1.0.0

cross-platform ⚠ suspicious

759

总下载

当前安装

版本数

在 OpenClaw 中安装

/install feishu-automation

功能描述

Advanced automation workflows for Feishu (Lark) productivity suite. Use when you need to automate document workflows, sync data across Feishu apps, generate...

使用说明 (SKILL.md)

Feishu Automation

Overview

This skill enables advanced automation across the Feishu/Lark productivity suite. It provides recipes, scripts, and workflows for common automation scenarios like batch document processing, data synchronization, report generation, and knowledge management.

Quick Start

Prerequisites

OpenClaw with Feishu integration configured
Feishu app permissions enabled for: docx, wiki, bitable, drive
Target documents/tables already exist and are accessible

Basic Example: Batch Update Documents

# Use the batch_update.py script to update multiple documents
python scripts/batch_update.py --folder-token fldcnXXX --template "weekly_report.md"

Core Automation Tasks

1. Document Automation

Batch Creation: Create multiple documents from templates
Content Sync: Sync data from Bitable to documents
Format Conversion: Convert between markdown and Feishu doc format
Backup & Archive: Periodically backup important documents

2. Wiki & Knowledge Management

Wiki Migration: Move content between wiki spaces
Auto-tagging: Tag wiki pages based on content analysis
TOC Generation: Generate table of contents for large wikis
Link Checking: Find and fix broken links in wiki

3. Bitable Automation

Data Import/Export: Sync Bitable with external data sources
Report Generation: Create documents from Bitable queries
Validation Rules: Enforce data quality in Bitable
Notification System: Alert on Bitable changes

4. Cross-App Workflows

Document → Bitable: Extract structured data from documents to tables
Bitable → Document: Generate reports from table data
Wiki → Drive: Archive wiki pages to cloud storage
Drive → Wiki: Import documents as wiki pages

Workflow Templates

Weekly Report Automation

Query Bitable for weekly metrics
Generate markdown report with charts
Create/update Feishu document
Post to designated wiki space
Notify team via Feishu chat

See references/weekly_report_workflow.md for detailed implementation.

Document Migration

List source folder documents
Convert each to markdown
Create new documents in target folder/wiki
Update all internal links
Verify completion

See scripts/migrate_documents.py for ready-to-use script.

Tool Reference

This skill builds on OpenClaw's native Feishu tools:

feishu_doc - Document read/write operations
feishu_wiki - Knowledge base navigation
feishu_bitable_* - Bitable operations
feishu_drive - Cloud storage management

Always use the native tools directly when possible; use scripts only for complex workflows.

Included Resources

This skill comes with ready-to-use resources for common automation tasks.

scripts/

batch_update.py - Update multiple documents from template
migrate_documents.py - Migrate documents between folders/spaces
bitable_to_doc.py - Generate documents from Bitable data
wiki_backup.py - Backup wiki pages to markdown files

references/

weekly_report_workflow.md - Step-by-step weekly report automation
feishu_api_patterns.md - Common API usage patterns and examples
error_handling.md - Handling common Feishu API errors
best_practices.md - Performance and reliability tips

assets/

templates/weekly_report.md - Weekly report template
templates/meeting_notes.md - Meeting notes template
templates/project_status.md - Project status update template
config/sample_config.yaml - Configuration examples

Getting Help

For questions or issues:

Check the relevant reference file first
Review error messages in error_handling.md
Adapt scripts to your specific use case
Consult OpenClaw Feishu documentation for tool specifics

安全使用建议

This package appears coherent for Feishu automation, but review and take these precautions before enabling it: 1) Prepare a Feishu app with only the minimal scopes required (least privilege) and supply credentials securely (environment variables or secret manager), not committed config files. 2) The skill manifest lists no required env vars, yet sample_config.yaml shows app_id/app_secret, app_tokens, webhook URLs and SMTP credentials—expect to provide those at runtime. 3) Inspect and replace any placeholder webhook/SMTP URLs and secrets; verify external webhook endpoints are trusted before enabling notifications. 4) Run scripts in dry-run mode first (many have --dry-run) and test in a limited sandbox folder/space. 5) Check logging/backup paths and retention (logs/feishu_automation.log, backups/) and ensure sensitive tokens are masked in logs. 6) If you want stricter control, restrict allowed_users/allowed_ips in config and avoid storing long-lived credentials in repo. Overall this skill is consistent with its description but requires normal security hygiene around Feishu credentials and any external webhooks.

功能分析

Type: OpenClaw Skill Name: feishu-automation Version: 1.0.0 The skill bundle is classified as suspicious due to several potential vulnerabilities in its Python scripts. Specifically, `scripts/batch_update.py` and `scripts/bitable_to_doc.py` are susceptible to Local File Inclusion (LFI) via their `--template` arguments, allowing an attacker to read arbitrary files if the input path is not sanitized. Additionally, `scripts/bitable_to_doc.py` and `scripts/wiki_backup.py` present an Arbitrary File Write vulnerability through their `--output-file` and `--output-dir` arguments, respectively, which could allow an attacker to write files to arbitrary locations. While these scripts primarily use placeholders for OpenClaw's native tools and do not exhibit clear malicious intent like data exfiltration or backdoor installation, the lack of robust input sanitization for user-controlled file paths constitutes a significant security risk.

能力评估

✓ Purpose & Capability

The skill name and description match the included scripts, templates, and reference docs (batch updates, bitable→doc, wiki backup, migrations). The provided code and SKILL.md consistently target Feishu tools and tokens (doc/wiki/bitable/drive). There are no unrelated services or unexpected binaries required by the skill itself.

✓ Instruction Scope

SKILL.md instructs the agent to use OpenClaw's Feishu integration and the included scripts for Feishu operations. The instructions and scripts focus on reading/writing Feishu documents, bitables, wikis and drive; they do not instruct reading arbitrary system files or exfiltrating data to unknown endpoints. The scripts use placeholders/comments for actual tool calls (exec/tool call) rather than embedding hidden network calls.

✓ Install Mechanism

No install spec is present (instruction-only with bundled scripts). No network download/install steps are defined, and all code is included in the package. This is the lowest-risk install model.

ℹ Credentials

Registry metadata declares no required env vars, but the sample_config.yaml and scripts clearly expect Feishu credentials/app tokens and optional integration keys (slack webhook, SMTP, webhook secrets). This is expected for a Feishu automation skill, but the metadata omission means the skill manifest doesn't explicitly list the sensitive values you will need to supply. Users should assume Feishu app_id/app_secret or per-operation app-token values are required at runtime.

✓ Persistence & Privilege

The skill is not marked always:true and does not request system-wide persistence or modify other skills. It writes/read local config/log/backup paths per sample_config (standard for automation tools) but does not attempt privileged system changes.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install feishu-automation
安装完成后，直接呼叫该 Skill 的名称或使用 /feishu-automation 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

初始发布：飞书自动化工作流技能

元数据

Slug feishu-automation

版本 1.0.0

许可证 —

累计安装 11

当前安装数 11

历史版本数 1

常见问题