← 返回 Skills 市场
diluke1600

feishu-create-openclaw-app

作者 ken · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
317
总下载
0
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install feishu-create-openclaw-app
功能描述
Automates creating and configuring a Feishu enterprise app for OpenClaw, including login, app setup, permission import, and credential extraction via browser...
使用说明 (SKILL.md)

Feishu App Creator Skill

Automates the creation of a Feishu (Lark) enterprise self-built application for OpenClaw integration via browser automation.

When to Use

  • User wants to create a new Feishu application for OpenClaw
  • Need to automate the Feishu developer console setup
  • Requires browser-based OAuth login and app configuration

Important: Personal Account Limitations

Complete Workflow

Step 1: Open Feishu Developer Console

browser action=open url=https://open.feishu.cn/app

Step 2: Check Login Status

Take snapshot and check for "创建企业自建应用" button. If visible, user is logged in.

Step 3: Create App

Click "创建企业自建应用" button

Wait for dialog to open.

Fill form using real user input simulation:

// Click name input, type app name
browser action=act kind=click ref=\x3Cname_input_ref>
browser action=act kind=type ref=\x3Cname_input_ref> text="openclaw"

// Click description textarea, type description
browser action=act kind=click ref=\x3Cdesc_textarea_ref>
browser action=act kind=type ref=\x3Cdesc_textarea_ref> text="OpenClaw integration app"

// Click an icon (RobotFilled)
browser action=act kind=click ref=\x3Cicon_ref>

// Click Create button
browser action=act kind=click ref=\x3Ccreate_button_ref>

Step 4: Navigate to Permission Management

After app created, click "权限管理" in sidebar.

Step 5: Import Permissions

{
  "scopes": {
    "tenant": [
      "aily:file:read",
      "aily:file:write",
      "application:application.app_message_stats.overview:readonly",
      "application:application:self_manage",
      "application:bot.menu:write",
      "cardkit:card:write",
      "contact:user.employee_id:readonly",
      "corehr:file:download",
      "docs:document.content:read",
      "event:ip_list",
      "im:chat",
      "im:chat.access_event.bot_p2p_chat:read",
      "im:chat.members:bot_access",
      "im:message",
      "im:message.group_at_msg:readonly",
      "im:message.group_msg",
      "im:message.p2p_msg:readonly",
      "im:message:readonly",
      "im:message:send_as_bot",
      "im:resource",
      "sheets:spreadsheet",
      "wiki:wiki:readonly"
    ],
    "user": [
      "aily:file:read",
      "aily:file:write",
      "im:chat.access_event.bot_p2p_chat:read"
    ]
  }
}

Import Process:

  1. Click "批量导入/导出权限" button

  2. Clear editor using Ctrl+A then fill:

browser action=act kind=evaluate fn="() => {
  const ta = document.querySelector('textarea[aria-label*=\"Editor\"]');
  if(ta) {
    ta.value = '';  // Clear first
    const json = 'YOUR_JSON_HERE';
    ta.value = json;
    ta.dispatchEvent(new Event('input', {bubbles:true, composed:true}));
    ta.dispatchEvent(new Event('change', {bubbles:true, composed:true}));
    return 'done:' + ta.value.length;
  }
  return 'err';
}"
  1. Click "下一步,确认新增权限"

  2. Review permissions dialog:

    • Shows "以下权限已申请,本次不会重复申请 (X)" for existing permissions
    • Shows new permissions to be added
  3. Click "申请开通"

Step 6: Extract Credentials

Navigate to "凭证与基础信息" page.

  • App ID: Visible directly (e.g., cli_xxxxxxxxxxxx)
  • App Secret: Click eye icon to reveal, display full secret to user

Key Points

Form Elements

  • 应用名称: input[type="text"] in dialog - use type action
  • 应用描述: textarea in dialog - use type action
  • 图标: [aria-label*="Filled"] icons in dialog - click to select

Permission Editor

  • JSON Editor: textarea[aria-label*="Editor"] - can use direct value assignment
  • Clear First: Always clear with ta.value = '' before filling
  • Trigger Events: Must dispatch input and change events

Account Type Detection

  • Personal Account: Only 2-3 permissions can be enabled
  • Enterprise Account: All permissions can be enabled
  • Detection: Check permission list after import - if only 3 permissions show, it's personal account

Output

After successful creation:

✅ 应用创建成功!

应用名称:openclaw
App ID: cli_xxxxxxxxxxxx
App Secret: \x3CFULL_SECRET>
状态:待上线


下一步:
1. 复制 App Secret(立即保存,只显示一次)
2. 在 OpenClaw 配置中填入 App ID 和 App Secret
3. 创建应用版本并发布
安全使用建议
This skill appears to do exactly what it claims: automate browser-based creation and configuration of a Feishu enterprise app. Before installing or running it: (1) Review the permission list carefully — it requests many tenant-level scopes and you should only grant what you need. (2) Be aware the instructions explicitly reveal the App Secret in the UI; treat that secret as sensitive (copy it to a secure vault and do not paste it in chat or store it in plain text). (3) Prefer running this interactively rather than granting broad autonomous invocation if you want manual approval of each run. (4) If you have doubts, perform the same steps manually in the Feishu console or use official APIs so you can control each permission and credential disclosure.
功能分析
Type: OpenClaw Skill Name: feishu-create-openclaw-app Version: 1.0.1 The skill automates Feishu (Lark) app creation and credential extraction using browser automation and JavaScript injection (`evaluate`) within `SKILL.md`. It requests an extensive list of high-privilege permissions (scopes), including the ability to read messages, documents, and spreadsheets, as well as managing its own application settings. While these capabilities are plausibly required for the stated purpose of 'OpenClaw integration,' the automated extraction of the App Secret and the broad access requested represent significant security risks without explicit user oversight of each permission.
能力评估
Purpose & Capability
Name/description describe automating Feishu app creation via browser automation; the SKILL.md contains step-by-step browser actions to open the Feishu developer console, create an app, import permission JSON, and reveal credentials — all directly relevant to that purpose.
Instruction Scope
Instructions are limited to browser interactions and DOM manipulation (clicks, typing, assigning textarea.value, dispatching input/change events) for configuring the Feishu console. This stays within the declared scope, but it explicitly instructs the agent to reveal and display the App Secret to the user — an action that legitimately needed here but is sensitive and should be handled carefully.
Install Mechanism
No install spec and no code files — instruction-only. Nothing is downloaded or written to disk by the skill itself, which minimizes supply-chain risk.
Credentials
The skill requests no environment variables or external credentials, which is proportional. The included permission JSON is broad (many tenant-level scopes); this is plausible for an integration but the user should review and approve the requested scopes before enabling them.
Persistence & Privilege
always is false and there are no installation steps that modify other skills or system-wide settings. The skill can be invoked autonomously per platform defaults, but there are no additional privileged persistence claims.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install feishu-create-openclaw-app
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /feishu-create-openclaw-app 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Removed the detailed section about Feishu personal account permission limitations. - Default permissions JSON for import now reflects the full enterprise account permission set. - Output and workflow steps are unchanged except for the omission of distinction between personal and enterprise accounts. - General documentation is now more concise, with less emphasis on account type differences.
v1.0.0
Initial release: Automates creation of a Feishu enterprise application for OpenClaw integration using browser automation. - Guides users through the complete workflow: login, app creation, permissions, and credential extraction. - Supports both personal and enterprise account scenarios with clear limitations and steps. - Automates form-filling and permission import using browser actions and direct DOM manipulation. - Outputs essential app credentials and provides next steps for integration.
元数据
Slug feishu-create-openclaw-app
版本 1.0.1
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 2
常见问题

feishu-create-openclaw-app 是什么?

Automates creating and configuring a Feishu enterprise app for OpenClaw, including login, app setup, permission import, and credential extraction via browser... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 317 次。

如何安装 feishu-create-openclaw-app?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install feishu-create-openclaw-app」即可一键安装,无需额外配置。

feishu-create-openclaw-app 是免费的吗?

是的,feishu-create-openclaw-app 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

feishu-create-openclaw-app 支持哪些平台?

feishu-create-openclaw-app 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 feishu-create-openclaw-app?

由 ken(@diluke1600)开发并维护,当前版本 v1.0.1。

💬 留言讨论