← 返回 Skills 市场
hashstacs-hk

feishu-quick-setup

作者 HashSTACS-HK · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
121
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install feishu-quick-setup
功能描述
One-click Feishu bot creation. Uses the Feishu App Registration API (Device Flow) to create a new Feishu Bot and save credentials to the OpenClaw config file...
使用说明 (SKILL.md)

feishu-quick-setup

Module compatibility: Scripts are provided in both .js and .mjs. Prefer .mjs; if you get a module error, fall back to .js.

Create a Feishu Bot for the user by executing the commands below step by step. All script output is single-line JSON.

Runtime

  • Command: node
  • Resolve script paths relative to this SKILL.md directory to absolute paths before execution.

Steps

Step 1 — Check existing config

node "{script_dir}/quick-setup.mjs" --status
Field Action
configured: true Tell the user Feishu is already configured (show appId), ask if they want to reconfigure
configured: false Proceed to Step 2

Step 2 — Start registration

node "{script_dir}/quick-setup.mjs" --begin --domain "feishu"
  • --domain: feishu (mainland China, default) or lark (international)
  • On error: false — you get verificationUrl and deviceCode. Proceed to Step 3.
  • On error: true — show the error message to the user and stop.

Step 3 — Show the link

Display the verificationUrl from Step 2 to the user as-is:

请点击以下链接完成飞书授权: {verificationUrl}

点击后在飞书中点击"确认创建"即可。

The correct link format is https://open.feishu.cn/page/openclaw?user_code=.... Do not modify or reconstruct the URL. This flow uses a link, not a QR code.

After showing the link, proceed directly to Step 4 (no need to wait for user reply).

Step 4 — Poll for completion

node "{script_dir}/quick-setup.mjs" --poll --wait --timeout 300

The script polls internally every 5 seconds until the user completes authorization or the timeout (default 5 min) is reached.

Result Action
status: "completed" Take appId and appSecret from the response, proceed to Step 5
status: "error", expired_token Link expired — restart from Step 2
status: "error", access_denied User denied the request — inform the user
status: "timeout" Timed out — suggest the user retry

Step 5 — Save config

node "{script_dir}/quick-setup.mjs" --save --app-id "APP_ID" --app-secret "APP_SECRET" --domain "feishu"

Replace APP_ID and APP_SECRET with the values from Step 4.

Result Action
success: true Show the message field from the response to the user (it contains next-step instructions and a permissions link)
success: false Show the failure reason to the user

Notes

  • Always use the commands above; do not call Feishu APIs directly or construct URLs manually.
  • This skill creates a new app. For user-level OAuth on an existing app, use feishu-auth instead.
  • Execute each step — do not skip steps or only describe them.
  • Always show the verificationUrl exactly as returned by the script.
安全使用建议
This skill appears to do what it claims: run local node scripts that talk to Feishu/Lark and store the created appId/appSecret in ~/.openclaw/openclaw.json. Before installing or running it: 1) Ensure you have a recent Node runtime available (SKILL.md uses 'node' but the registry metadata didn't list it). 2) Inspect the bundled scripts (they are included) and confirm you trust them; they only call accounts.feishu.cn / accounts.larksuite.com and write to your OpenClaw config and a .pending.json file. 3) Back up your existing ~/.openclaw/openclaw.json (the script makes a .bak for existing files but you may want your own backup). 4) Remember appSecret is stored in cleartext in openclaw.json; consider filesystem permissions and whether that's acceptable. 5) If you plan to let an autonomous agent invoke this skill, be aware it will execute the bundled node scripts with whatever filesystem/network permissions the agent process has. If any of these items concern you, run the scripts manually instead of allowing the agent to run them autonomously.
功能分析
Type: OpenClaw Skill Name: feishu-quick-setup Version: 1.0.2 The feishu-quick-setup skill is designed to automate the creation of a Feishu bot using the official Feishu App Registration (Device Flow) API. The scripts (quick-setup.mjs/js) interact with legitimate Feishu and Lark domains (accounts.feishu.cn and accounts.larksuite.com) to obtain credentials and then save them to the local OpenClaw configuration file (~/.openclaw/openclaw.json). The logic is transparent, lacks obfuscation, and performs file/network operations that are strictly necessary for its stated purpose without any signs of data exfiltration or malicious intent.
能力标签
requires-oauth-token
能力评估
Purpose & Capability
The skill name, description, SKILL.md, and included JS/MJS scripts all align: they start a device-flow registration with Feishu/Lark, poll for completion, and save appId/appSecret to the OpenClaw config. Minor incoherence: SKILL.md and scripts require running 'node' but the registry metadata declares no required binaries. The missing 'node' declaration is an oversight but not evidence of malicious intent.
Instruction Scope
SKILL.md explicitly instructs the agent to run the provided node scripts step-by-step and to display the verificationUrl exactly as returned. The instructions do not ask the agent to read unrelated files or exfiltrate arbitrary data. The scripts do read/write only the OpenClaw config and a local .pending.json file (documented in code), which is consistent with the skill's purpose.
Install Mechanism
There is no external install spec or remote download; all code is bundled with the skill (JS/MJS). That keeps install risk low. The scripts will be executed locally; no archives or external binaries are fetched by the skill itself.
Credentials
The skill requests no environment variables or external credentials, which is appropriate. It does write sensitive secrets (appSecret) into the user's OpenClaw config (~/.openclaw/openclaw.json) in cleartext — this is expected for its function but is a sensitive action users should be aware of. The code also writes a .pending.json file next to the scripts to persist device_code state.
Persistence & Privilege
The skill is not always-enabled and does not request elevated system-wide privileges. It modifies only the OpenClaw config (its intended target) and creates a local pending file; it does not alter other skills or global agent settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install feishu-quick-setup
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /feishu-quick-setup 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
feishu-quick-setup 1.0.2 - Improved English documentation for better clarity and consistency. - Provided clearer step-by-step instructions, including example commands and expected outputs. - Clarified that all script outputs are JSON and command paths should be resolved absolutely. - Explicitly stated not to use QR codes or reconstruct URLs, emphasizing use of returned verificationUrl. - Aligned terminology, emphasizing the difference between Feishu app creation and OAuth authorization.
v1.0.1
- 文档描述优化,更简洁明了,突出「无需自行编写代码或调用 API」。 - 禁止事项调整为注意事项,表述更温和且有指导性。 - 强调命令执行顺序和原样展示 verificationUrl 的重要性。 - 移除了对“二维码或扫码”的相关表述,明确仅通过链接完成注册流程。 - 明确建议每一步都需实际执行命令而非仅描述流程。
v1.0.0
feishu-quick-setup 1.0.0 - Initial release of the feishu-quick-setup skill for one-click Feishu app configuration. - Guides users through interactive CLI steps to create a Feishu Bot and update OpenClaw config. - Detects existing configuration and offers to re-configure if desired. - Securely registers new Feishu app via official App Registration API; does not use user OAuth. - Prevents manual URL/API manipulation to ensure correct setup flow.
元数据
Slug feishu-quick-setup
版本 1.0.2
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 3
常见问题

feishu-quick-setup 是什么?

One-click Feishu bot creation. Uses the Feishu App Registration API (Device Flow) to create a new Feishu Bot and save credentials to the OpenClaw config file... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 121 次。

如何安装 feishu-quick-setup?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install feishu-quick-setup」即可一键安装,无需额外配置。

feishu-quick-setup 是免费的吗?

是的,feishu-quick-setup 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

feishu-quick-setup 支持哪些平台?

feishu-quick-setup 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 feishu-quick-setup?

由 HashSTACS-HK(@hashstacs-hk)开发并维护,当前版本 v1.0.2。

💬 留言讨论