← 返回 Skills 市场
roy-oss1

feishu-lark-cli

作者 Roy-oss1 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ✓ 安全检测通过
91
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install feishu-lark-cli
功能描述
飞书即时通讯:收发消息和管理群聊。发送和回复消息、搜索聊天记录、管理群聊成员、上传下载图片和文件、管理表情回复。当用户需要发消息、查看或搜索聊天记录、下载聊天中的文件、查看群成员时使用。
使用说明 (SKILL.md)

im (v1)

CRITICAL — 开始前 MUST 先用 Read 工具读取 ../lark-shared/SKILL.md,其中包含认证、权限处理

Core Concepts

  • Message: A single message in a chat, identified by message_id (om_xxx). Supports types: text, post, image, file, audio, video, sticker, interactive (card), share_chat, share_user, merge_forward, etc.
  • Chat: A group chat or P2P conversation, identified by chat_id (oc_xxx).
  • Thread: A reply thread under a message, identified by thread_id (om_xxx or omt_xxx).
  • Reaction: An emoji reaction on a message.

Resource Relationships

Chat (oc_xxx)
├── Message (om_xxx)
│   ├── Thread (reply thread)
│   ├── Reaction (emoji)
│   └── Resource (image / file / video / audio)
└── Member (user / bot)

Important Notes

Identity and Token Mapping

  • --as user means user identity and uses user_access_token. Calls run as the authorized end user, so permissions depend on both the app scopes and that user's own access to the target chat/message/resource.
  • --as bot means bot identity and uses tenant_access_token. Calls run as the app bot, so behavior depends on the bot's membership, app visibility, availability range, and bot-specific scopes.
  • If an IM API says it supports both user and bot, the token type changes who the operator is. The same API can succeed with one identity and fail with the other because owner/admin status, chat membership, tenant boundary, or app availability are checked against the current caller.

Sender Name Resolution with Bot Identity

When using bot identity (--as bot) to fetch messages (e.g. +chat-messages-list, +threads-messages-list, +messages-mget), sender names may not be resolved (shown as open_id instead of display name). This happens when the bot cannot access the user's contact info.

Root cause: The bot's app visibility settings do not include the message sender, so the contact API returns no name.

Solution: Check the app's visibility settings in the Lark Developer Console — ensure the app's visible range covers the users whose names need to be resolved. Alternatively, use --as user to fetch messages with user identity, which typically has broader contact access.

Card Messages (Interactive)

Card messages (interactive type) are not yet supported for compact conversion in event subscriptions. The raw event data will be returned instead, with a hint printed to stderr.

Shortcuts(推荐优先使用)

Shortcut 是对常用操作的高级封装(lark-cli im +\x3Cverb> [flags])。有 Shortcut 的操作优先使用。

Shortcut 说明
+chat-create Create a group chat; user/bot; creates private/public chats, invites users/bots, optionally sets bot manager
+chat-messages-list List messages in a chat or P2P conversation; user/bot; accepts --chat-id or --user-id, resolves P2P chat_id, supports time range/sort/pagination
+chat-search Search visible group chats by keyword and/or member open_ids (e.g. look up chat_id by group name); user/bot; supports member/type filters, sorting, and pagination
+chat-update Update group chat name or description; user/bot; updates a chat's name or description
+messages-mget Batch get messages by IDs; user/bot; fetches up to 50 om_ message IDs, formats sender names, expands thread replies
+messages-reply Reply to a message (supports thread replies); user/bot; supports text/markdown/post/media replies, reply-in-thread, idempotency key
+messages-resources-download Download images/files from a message; user/bot; downloads image/file resources by message-id and file-key to a safe relative output path
+messages-search Search messages across chats (supports keyword, sender, time range filters) with user identity; user-only; filters by chat/sender/attachment/time, supports auto-pagination via --page-all / --page-limit, enriches results via batched mget and chats batch_query
+messages-send Send a message to a chat or direct message; user/bot; sends to chat-id or user-id with text/markdown/post/media, supports idempotency key
+threads-messages-list List messages in a thread; user/bot; accepts om_/omt_ input, resolves message IDs to thread_id, supports sort/pagination

API Resources

lark-cli schema im.\x3Cresource>.\x3Cmethod>   # 调用 API 前必须先查看参数结构
lark-cli im \x3Cresource> \x3Cmethod> [flags] # 调用 API

重要:使用原生 API 时,必须先运行 schema 查看 --data / --params 参数结构,不要猜测字段格式。

chats

  • create — 创建群。Identity: bot only (tenant_access_token).
  • get — 获取群信息。Identity: supports user and bot; the caller must be in the target chat to get full details, and must belong to the same tenant for internal chats.
  • link — 获取群分享链接。Identity: supports user and bot; the caller must be in the target chat, must be an owner or admin when chat sharing is restricted to owners/admins, and must belong to the same tenant for internal chats.
  • list — 获取用户或机器人所在的群列表。Identity: supports user and bot.
  • update — 更新群信息。Identity: supports user and bot.

chat.members

  • create — 将用户或机器人拉入群聊。Identity: supports user and bot; the caller must be in the target chat; for bot calls, added users must be within the app's availability; for internal chats the operator must belong to the same tenant; if only owners/admins can add members, the caller must be an owner/admin, or a chat-creator bot with im:chat:operate_as_owner.
  • delete — 将用户或机器人移出群聊。Identity: supports user and bot; only group owner, admin, or creator bot can remove others; max 50 users or 5 bots per request.
  • get — 获取群成员列表。Identity: supports user and bot; the caller must be in the target chat and must belong to the same tenant for internal chats.

messages

  • delete — 撤回消息。Identity: supports user and bot; for bot calls, the bot must be in the chat to revoke group messages; to revoke another user's group message, the bot must be the owner, an admin, or the creator; for user P2P recalls, the target user must be within the bot's availability.
  • forward — 转发消息。Identity: bot only (tenant_access_token).
  • merge_forward — 合并转发消息。Identity: bot only (tenant_access_token).
  • read_users — 查询消息已读信息。Identity: bot only (tenant_access_token); the bot must be in the chat, and can only query read status for messages it sent within the last 7 days.

reactions

  • batch_query — 批量获取消息表情。Identity: supports user and bot.Must-read
  • create — 添加消息表情回复。Identity: supports user and bot; the caller must be in the conversation that contains the message.Must-read
  • delete — 删除消息表情回复。Identity: supports user and bot; the caller must be in the conversation that contains the message, and can only delete reactions added by itself.Must-read
  • list — 获取消息表情回复。Identity: supports user and bot; the caller must be in the conversation that contains the message.Must-read

images

  • create — 上传图片。Identity: bot only (tenant_access_token).

pins

  • create — Pin 消息。Identity: supports user and bot.
  • delete — 移除 Pin 消息。Identity: supports user and bot.
  • list — 获取群内 Pin 消息。Identity: supports user and bot.

权限表

方法 所需 scope
chats.create im:chat:create
chats.get im:chat:read
chats.link im:chat:read
chats.list im:chat:read
chats.update im:chat:update
chat.members.create im:chat.members:write_only
chat.members.delete im:chat.members:write_only
chat.members.get im:chat.members:read
messages.delete im:message:recall
messages.forward im:message
messages.merge_forward im:message
messages.read_users im:message:readonly
reactions.batch_query im:message.reactions:read
reactions.create im:message.reactions:write_only
reactions.delete im:message.reactions:write_only
reactions.list im:message.reactions:read
images.create im:resource
pins.create im:message.pins:write_only
pins.delete im:message.pins:write_only
pins.list im:message.pins:read
安全使用建议
This skill appears to be a coherent wrapper for the official Lark CLI. Before installing: (1) inspect the referenced ../lark-shared/SKILL.md (authentication/permission handling) — it wasn't included here; (2) verify the npm package (@larksuite/cli) and its publisher on the npm registry and GitHub homepage to ensure it is the official package; (3) expect lark-cli to require you to run an auth/login flow (it should not ask the skill for unrelated cloud credentials); and (4) if you need a higher assurance, review the shared auth doc and the package source code to confirm how tokens are stored and whether any background services or network endpoints beyond Lark's APIs are contacted.
功能分析
Type: OpenClaw Skill Name: feishu-lark-cli Version: 1.0.0 The skill bundle provides a legitimate and well-documented interface for the official Lark (Feishu) CLI (@larksuite/cli). It includes comprehensive instructions for managing chats, messages, and resources, with explicit safety constraints in files like lark-im-messages-send.md and lark-im-messages-reply.md that require the AI agent to seek user approval before performing write actions. Additionally, lark-im-messages-resources-download.md implements security checks to prevent directory traversal during file downloads.
能力标签
requires-oauth-token
能力评估
Purpose & Capability
Name/description map directly to lark-cli IM features (send/reply/search/download/manage chats). The only required binary is lark-cli and the install spec installs @larksuite/cli which creates the lark-cli binary — this is proportionate and expected.
Instruction Scope
SKILL.md contains detailed, purpose-scoped instructions for using lark-cli (APIs, shortcuts, safety prompts for sending messages). It repeatedly instructs the agent to read ../lark-shared/SKILL.md for authentication and permission handling — that referenced shared file is not included in this bundle, so the runtime instructions depend on an external document you should inspect to confirm authentication handling and any extra I/O.
Install Mechanism
Install uses an npm package @larksuite/cli to provide the lark-cli binary. This is a standard registry install for a CLI wrapper and consistent with the described behavior. (Note: npm packages carry typical supply-chain risk; verify the package and publisher if you need high assurance.)
Credentials
The skill declares no required env vars or config paths, which is consistent because lark-cli typically uses its own auth flow. However, the missing ../lark-shared/SKILL.md probably contains authentication/permission instructions and may describe how tokens are acquired/stored — review it to confirm no unexpected credential requirements or config path access are implied.
Persistence & Privilege
The skill is not always-enabled, is user-invocable, and does not request system-wide config paths or persistently elevated privileges. Installing the npm package will produce the lark-cli binary (expected). No evidence it modifies other skills or global agent settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install feishu-lark-cli
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /feishu-lark-cli 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
feishu-lark-cli 1.0.0 - Initial release with comprehensive 飞书 (Feishu/Lark) instant messaging CLI capabilities. - Supports sending, replying, searching messages; managing group chats and members; uploading/downloading images and files; managing emoji reactions. - Provides both user and bot identity operation; detailed token/permission guidance included. - Advanced, shortcut-style commands for common IM tasks. - Thorough documentation of core concepts, and resource relationships for effective usage.
元数据
Slug feishu-lark-cli
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

feishu-lark-cli 是什么?

飞书即时通讯:收发消息和管理群聊。发送和回复消息、搜索聊天记录、管理群聊成员、上传下载图片和文件、管理表情回复。当用户需要发消息、查看或搜索聊天记录、下载聊天中的文件、查看群成员时使用。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 91 次。

如何安装 feishu-lark-cli?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install feishu-lark-cli」即可一键安装,无需额外配置。

feishu-lark-cli 是免费的吗?

是的,feishu-lark-cli 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

feishu-lark-cli 支持哪些平台?

feishu-lark-cli 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 feishu-lark-cli?

由 Roy-oss1(@roy-oss1)开发并维护,当前版本 v1.0.0。

💬 留言讨论