← 返回 Skills 市场
magicaldd

Feishu Reaction

作者 magicaldd · GitHub ↗ · v1.1.0
cross-platform ⚠ suspicious
422
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install feishu-reaction
功能描述
Add or remove emoji reactions on Feishu (Lark) messages, and respond to user reactions. Use when the user asks to react to a message, add an emoji/expression...
使用说明 (SKILL.md)

Feishu Reaction

Add/remove emoji reactions on Feishu messages via API. Enables richer, more playful interactions beyond text.

Usage

# Add reaction
bash scripts/feishu-reaction.sh \x3Cmessage_id> \x3Cemoji_type>

# Remove reaction
bash scripts/feishu-reaction.sh \x3Cmessage_id> \x3Cemoji_type> remove

Resolve scripts/feishu-reaction.sh relative to this skill's directory.

Getting message_id

The message_id comes from inbound message metadata (e.g., om_x100b554e82c620a4c...). Use the current message's message_id from conversation context.

Behavior Guide

Proactive reactions to user messages

React to user messages naturally, like a human would:

  • User says something nice → HEART, THUMBSUP, or YEAH
  • User shares good news → PARTY, FIREWORKS, or CLAP
  • User asks for help → OK (then reply with text)
  • User sends something funny → SMILE or WITTY

Don't overdo it — not every message needs a reaction. Use when it adds warmth without cluttering.

Responding to user reactions

When a user reacts to your message with an emoji, respond appropriately:

Positive/neutral reactions (HEART, THUMBSUP, YEAH, GoGoGo, FISTBUMP, PARTY, CLAP, SMILE, WOW, SaluteFace, WINK, GLANCE, etc.): → React back with a complementary emoji. No text reply needed.

Negative/questioning reactions (ANGRY, SPEECHLESS, FACEPALM, CRY, TERROR, SWEAT, WHAT, etc.): → React back with a caring emoji (HUG, HEART) AND follow up with a text message asking what's wrong.

Choosing reaction emojis

Pick reactions that feel natural and varied — don't always use the same one. Match the energy:

  • They send ❤️ → reply with 🤗 or ❤️
  • They send 💪 → reply with 🔥 or 💪
  • They send 👀 → reply with 😉

Available Emoji Types

Common: THUMBSUP, SMILE, OK, HEART, LOVE, THANKS, YEAH, AWESOME, PARTY, CLAP, APPLAUSE

Emotions: CRY, ANGRY, SHY, BLUSH, SPEECHLESS, TERROR, WOW, FACEPALM, SWEAT, PROUD, OBSESSED

Actions: WAVE, HUG, KISS, WINK, TONGUE, MUSCLE, SALUTE

Objects: FIRE, BEER, CAKE, GIFT, ROSE, FIREWORKS

Other: WITTY, JIAYI

Prerequisites

  • Feishu channel configured in OpenClaw (openclaw.json has channels.feishu.appId and appSecret)
  • App has im:message:reaction permission (飞书开放平台 → 应用权限 → 消息与群组 → 表情回复)

Examples

React with thumbs up to acknowledge a message:

bash scripts/feishu-reaction.sh "om_xxx" "THUMBSUP"

React with heart to show appreciation:

bash scripts/feishu-reaction.sh "om_xxx" "HEART"

Remove a reaction:

bash scripts/feishu-reaction.sh "om_xxx" "THUMBSUP" remove
安全使用建议
This skill's functionality is coherent, but it quietly reads your OpenClaw config file to get the Feishu appId/appSecret even though the registry metadata didn't declare that requirement. Before installing: (1) verify you want this skill to access $HOME/.openclaw/openclaw.json (or set OPENCLAW_CONFIG to a safe location); (2) inspect openclaw.json to ensure it does not expose unrelated secrets; (3) confirm the Feishu app has only the minimum permissions (im:message:reaction) and that you trust the app credentials will be used only to call open.feishu.cn; (4) if you need stronger guarantees, request the skill owner to declare the required config path/credentials in the metadata and to prefer explicit env vars rather than reading broad config files; and (5) consider running the skill in a restricted/sandboxed environment or review network traffic to confirm no unexpected endpoints are contacted.
功能分析
Type: OpenClaw Skill Name: feishu-reaction Version: 1.1.0 The skill is classified as suspicious due to significant input sanitization vulnerabilities in `scripts/feishu-reaction.sh`. The script directly interpolates `$MSG_ID` and `$EMOJI_TYPE` into `curl` commands without proper escaping or validation. This creates potential JSON injection vulnerabilities (via `emoji_type` in the POST body) and URL injection vulnerabilities (via `message_id` in the URL path and `emoji_type` in URL query parameters). While the `SKILL.md` instructions guide the agent to use predefined emoji types, the script itself does not enforce this, making it vulnerable if the agent is prompted to pass arbitrary user-controlled input. There is no evidence of intentional malicious behavior like data exfiltration or unauthorized remote control, but these vulnerabilities could be exploited to achieve such outcomes.
能力评估
✓ Purpose & Capability
Name/description, SKILL.md, and the included script all align: the skill adds/removes reactions via Feishu APIs using an app's credentials. No unrelated services or binaries are requested.
✓ Instruction Scope
Runtime instructions and the script only perform operations needed to add/remove reactions (read openclaw.json, get tenant token, call Feishu reaction endpoints). They do not call other external endpoints or read unrelated system paths.
✓ Install Mechanism
No install spec (instruction-only with an included shell script). Nothing is downloaded or written by an installer — risk from install mechanism is low.
⚠ Credentials
The script reads openclaw.json (APP_ID and APP_SECRET) from $OPENCLAW_CONFIG or $HOME/.openclaw/openclaw.json, but the registry metadata declared no required config paths or primary credential. That mismatch (missing declaration of required config/credentials) is disproportionate and should be fixed or justified. Also note openclaw.json may contain other sensitive values; the script reads the file directly.
✓ Persistence & Privilege
Skill is not always-on, does not request persistent system modifications, and does not modify other skills' configs. It runs on demand via the script.
如何使用
  1. 确保已安装 OpenClaw（本地或 Docker 部署）
  2. 在对话框中输入安装命令：/install feishu-reaction
  3. 安装完成后，直接呼叫该 Skill 的名称或使用 /feishu-reaction 触发
  4. 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.0
v1.1.0: Added behavior guide for proactive reactions and responding to user reactions. Positive reactions get emoji reply, negative/questioning reactions trigger follow-up. Makes Feishu interactions more playful and natural.
v1.0.0
Initial release: add/remove emoji reactions on Feishu messages via API
元数据
Slug feishu-reaction
版本 1.1.0
许可证 —
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Feishu Reaction 是什么？

Add or remove emoji reactions on Feishu (Lark) messages, and respond to user reactions. Use when the user asks to react to a message, add an emoji/expression... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 422 次。

如何安装 Feishu Reaction？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install feishu-reaction」即可一键安装，无需额外配置。

Feishu Reaction 是免费的吗？

是的，Feishu Reaction 完全免费（开源免费），可自由下载、安装和使用。

Feishu Reaction 支持哪些平台？

Feishu Reaction 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Feishu Reaction？

由 magicaldd（@magicaldd）开发并维护，当前版本 v1.1.0。

推荐 Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191115 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 留言讨论