← 返回 Skills 市场
ganguagua

飞书多维表格权限检查

作者 ganguagua · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ 安全检测通过
97
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install feishu-bitable-permission-checker
功能描述
飞书多维表格文档权限检查工具。当用户提供一个飞书多维表格(bitable)URL 或 app_token 时,自动提取【链接地址】列,逐一检查每个链接的飞书文档(docx/wiki)阅读权限,最终输出【有权限文档列表】和【无权限文档列表】。触发词:检查文档权限、批量检查权限、哪些文档我能看、多维表格链接权限检查。
使用说明 (SKILL.md)

Feishu Bitable Permission Checker

输入一个飞书多维表格,提取「链接地址」列,批量检查飞书文档阅读权限。

工作流程

Step 1:解析多维表格

支持两种输入格式:

  • 完整 URLhttps://asiainfo.feishu.cn/base/FDo4bVmnVaYRJlslJttcPwgwnfh?table=tblRjin7OM9XvEDL&view=vew3qPDrS3
  • 仅 app_tokenFDo4bVmnVaYRJlslJttcPwgwnfh(需同时提供 table_id)

从 URL 中提取:

  • app_token:第一个路径段(如 FDo4bVmnVaYRJlslJttcPwgwnfh
  • table_id:从 table= 参数获取(如 tblRjin7OM9XvEDL

Step 2:查找「链接地址」列字段 ID

调用 feishu_bitable_app_table_field 获取表结构:

feishu_bitable_app_table_field(
  action="list",
  app_token="\x3Capp_token>",
  table_id="\x3Ctable_id>"
)

在返回的 fields 数组中找到 field_name 为「链接地址」的字段,记录其 field_id

注意:如果字段名不是「链接地址」,根据实际字段名调整查询参数。

Step 3:提取所有链接地址

调用 feishu_bitable_app_table_record 获取所有记录:

feishu_bitable_app_table_record(
  action="list",
  app_token="\x3Capp_token>",
  table_id="\x3Ctable_id>",
  field_names=["员工姓名", "链接地址"],
  page_size=500
)

解析每条记录的 fields,提取:

  • 员工姓名:主键字段,用于标识文档归属
  • 链接地址:目标文档 URL(docx 或 wiki)

Step 4:批量检查文档权限

对每个链接,调用 feishu_fetch_doc 验证读取权限:

feishu_fetch_doc(doc_id="\x3Cdoc_id>")
  • doc_id 从 URL 路径段提取(docx 或 wiki token)
  • 解析返回结果:
    • success=true + message="Document fetched successfully"有权限
    • error 中包含 forBidden无权限
    • error 中包含 request trigger frequency limit限流,稍后重试

权限判断逻辑

if success == true:
    → 有权限
elif "forBidden" in error:
    → 无权限
elif "frequency limit" in error:
    → 限流,延迟3秒后重试一次
else:
    → 视为无权限

限流处理

飞书 API 有频率限制(10-20 QPS)。每个文档最多重试 2 次:

  1. 首次失败 → 等 3 秒 → 重试
  2. 重试仍失败 → 等 5 秒 → 再重试
  3. 仍失败 → 标记为无权限

每次最多并发 10 个请求,超出时拆分为多批次(间隔 1 秒)。

Step 5:输出结果

按以下格式输出:

## 权限检查结果

### ✅ 有阅读权限({n} 人)

| 序号 | 员工姓名 | 文档标题 | 链接 |
|------|----------|----------|------|
| 1 | 张三 | 标题 | [链接](url) |

### ❌ 无阅读权限({m} 人)

| 序号 | 员工姓名 | 链接 |
|------|----------|------|
| 1 | 李四 | [链接](url) |

关键约束

  1. 权限隔离:只向 owner 报告结果,不在群聊中暴露文档内容
  2. 不重复输出:同一批文档只报告一次结果,不分段重复发送
  3. 限流优先重试:限流错误不等同于无权限,必须重试
  4. URL 清洗:链接中的查询参数(如 ?from=from_copylink)不影响 doc_id 提取,只取路径段

工具依赖

  • feishu_bitable_app_table_field:查字段结构
  • feishu_bitable_app_table_record:批量读记录
  • feishu_fetch_doc:验证文档可读性

详细字段类型和 API 行为见 references/api_notes.md

安全使用建议
This skill appears internally consistent for batch-checking Feishu/bitable document read permissions. Before installing or using it: (1) confirm how your agent/platform provides Feishu access (the skill will call feishu_* APIs using whatever connector credentials are available); ensure those credentials have only the needed scope and are from an account you expect to use for these checks; (2) be aware the skill may fetch document content to determine access—verify the implementation will not leak document contents to unintended recipients; (3) test on a small set of URLs to validate rate-limit handling and output formatting; (4) if you prefer not to expose document contents at all, ensure the platform's Feishu connector can do a lightweight permission check rather than full content fetch, or modify the workflow to avoid retrieving markdown/title.
功能分析
Type: OpenClaw Skill Name: feishu-bitable-permission-checker Version: 1.0.0 The skill is a utility designed to automate the checking of Feishu document permissions from a list stored in a Bitable. It uses standard Feishu API tools (feishu_bitable_app_table_field, feishu_bitable_app_table_record, and feishu_fetch_doc) to extract document IDs and verify accessibility. The instructions in SKILL.md include privacy-conscious constraints, such as only reporting results to the owner and handling API rate limits gracefully. No indicators of data exfiltration, malicious execution, or harmful prompt injection were found.
能力评估
Purpose & Capability
The name/description match the runtime instructions: the skill extracts an app_token/table_id or URL, finds the '链接地址' field, and uses Feishu-specific APIs to test read permission. There are no unrelated required binaries or environment variables. The declared tool calls (feishu_bitable_app_table_field, feishu_bitable_app_table_record, feishu_fetch_doc) are appropriate for the described task.
Instruction Scope
Instructions stay within the permission-checking use case and do not request local files or unrelated env vars. However, the chosen method for permission testing uses feishu_fetch_doc which returns document content (markdown/title); the SKILL.md states it will not expose document contents and only report permission status, but the skill will still fetch documents under whatever Feishu credentials the agent has. That behavior is coherent with the purpose but worth noting as it could expose content if implemented or used differently.
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is written to disk and no external packages are pulled during install.
Credentials
The skill declares no required env vars or primary credential, which is consistent with expecting a user-supplied app_token (from URL or input). One implicit dependency is access to a Feishu connector / agent-level credentials to execute the feishu_* calls; those credentials and scopes are not declared here. This is proportionate to the task but users should verify the connector's scope (it will be used to perform many API calls and may return document content).
Persistence & Privilege
always is false and the skill does not request persistent/enforced presence or any system-wide config changes. It does not claim to modify other skills or system settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install feishu-bitable-permission-checker
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /feishu-bitable-permission-checker 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
首发版本:批量检查多维表格中文档的阅读权限
元数据
Slug feishu-bitable-permission-checker
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

飞书多维表格权限检查 是什么?

飞书多维表格文档权限检查工具。当用户提供一个飞书多维表格(bitable)URL 或 app_token 时,自动提取【链接地址】列,逐一检查每个链接的飞书文档(docx/wiki)阅读权限,最终输出【有权限文档列表】和【无权限文档列表】。触发词:检查文档权限、批量检查权限、哪些文档我能看、多维表格链接权限检查。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 97 次。

如何安装 飞书多维表格权限检查?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install feishu-bitable-permission-checker」即可一键安装,无需额外配置。

飞书多维表格权限检查 是免费的吗?

是的,飞书多维表格权限检查 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

飞书多维表格权限检查 支持哪些平台?

飞书多维表格权限检查 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 飞书多维表格权限检查?

由 ganguagua(@ganguagua)开发并维护,当前版本 v1.0.0。

💬 留言讨论