← 返回 Skills 市场

Feishu Weekly Report Generator

Name: Feishu Weekly Report Generator
Author: jiahui220

作者 jiahui220 · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

282

总下载

当前安装

版本数

在 OpenClaw 中安装

/install feishu-weekly-generator

功能描述

Generate professional weekly work reports for Feishu/Lark users. Automatically collect work data from various sources and create formatted weekly reports com...

使用说明 (SKILL.md)

Feishu Weekly Report Generator

Generate professional weekly work reports for Feishu users.

Features

Automatic Data Collection: Gather work data from git commits, calendar events, task completions
AI-Powered Summary: Generate professional weekly summaries using AI
Feishu Compatible: Output in Feishu document format (markdown)
Customizable Templates: Multiple report styles available

Quick Start

Generate Weekly Report

node scripts/generate-weekly.mjs

With Options

# Specify date range
node scripts/generate-weekly.mjs --start 2026-03-10 --end 2026-03-14

# Specify output file
node scripts/generate-weekly.mjs --output my-weekly-report.md

# Include git commits
node scripts/generate-weekly.mjs --git ~/my-project

# Full options
node scripts/generate-weekly.mjs --start 2026-03-10 --end 2026-03-14 --git ~/projects --output weekly.md

Report Structure

The generated report includes:

本周工作总结 - Summary of week's work
已完成工作 - Completed tasks with details
进行中工作 - Work in progress
下周计划 - Next week's plan
遇到的问题 - Issues and blockers
需要的支持 - Support needed

Templates

Available templates in references/templates/:

standard.md - Standard weekly report format
detailed.md - Detailed format with more sections
minimal.md - Minimal format for quick reports

Feishu Integration

After generating the report:

Copy the markdown content
Paste into Feishu document
Format will be preserved

Or use Feishu API to directly create document (requires Feishu bot token).

Options

Option	Description	Default
`--start`	Start date (YYYY-MM-DD)	Last Monday
`--end`	End date (YYYY-MM-DD)	Last Friday
`--git`	Git repository path	None
`--template`	Template to use	standard
`--output`	Output file path	weekly-report-YYYY-MM-DD.md
`--name`	User name	Git user.name or 'User'
`--department`	Department name	Optional

Examples

Basic Usage

node scripts/generate-weekly.mjs

With Git Integration

node scripts/generate-weekly.mjs --git ~/projects/my-app --name "张三" --department "技术部"

Custom Date Range

node scripts/generate-weekly.mjs --start 2026-03-01 --end 2026-03-07 --output march-week1.md

安全使用建议

Before installing or running this skill: 1) Understand the capability mismatch — the code only collects local git commits and writes a markdown report; calendar/task collection and Feishu API upload are not implemented. 2) Inspect the script if you plan to run it: it constructs and executes a git shell command with the provided --git path (execSync with interpolated input), so do not pass untrusted or attacker-controlled paths to avoid shell-injection or unexpected git execution. 3) If you expect Feishu integration, know you'll need to implement or provide safe code that uses an API token (and that token should be declared and protected). 4) Run the script from a restricted account and review the generated output before posting to any external service. If you need the claimed calendar/task integrations or direct Feishu upload, request an updated version that implements those features transparently and documents required env vars.

功能分析

Type: OpenClaw Skill Name: feishu-weekly-generator Version: 1.0.0 The skill bundle contains a command injection vulnerability in `scripts/generate-weekly.mjs`. The script uses `execSync` to execute git commands using unsanitized input from the `--git` command-line argument, which could allow arbitrary command execution if a malicious path is provided. While the tool's logic aligns with its stated purpose of generating weekly reports and no evidence of intentional malice or data exfiltration was found, the high-risk use of shell execution without input validation warrants a suspicious classification.

能力评估

⚠ Purpose & Capability

The skill description claims automatic collection from 'git commits, calendar events, task completions' and Feishu API integration; the actual code only supports collecting local git commits and rendering templates to a local markdown file. No calendar/task integrations or Feishu API calls are implemented, so requested capabilities are overstated.

⚠ Instruction Scope

SKILL.md tells the agent to run node scripts/generate-weekly.mjs and mentions using Feishu API if you have a bot token, but the runtime instructions do not match the code (the code never calls Feishu APIs). The script reads local templates and may run git commands against any repository path you pass; it does not access external endpoints or other system credentials, but the mismatch grants the agent misleading scope.

✓ Install Mechanism

No install spec or external downloads; package.json only defines a Node >=18 runtime. Nothing is fetched from untrusted URLs and no archives are extracted.

ℹ Credentials

The skill declares no required env vars or credentials, which matches the code (it doesn't implement Feishu API calls). However SKILL.md mentions Feishu bot tokens for direct API upload but does not declare or use any environment variable for that token — an inconsistency users should be aware of.

✓ Persistence & Privilege

The skill is not always-enabled, does not request special agent/system persistence, and does not modify other skills or system-wide settings. It writes only the generated report file to the filesystem.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install feishu-weekly-generator
安装完成后，直接呼叫该 Skill 的名称或使用 /feishu-weekly-generator 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release: Generate professional weekly reports for Feishu users with git integration

元数据

Slug feishu-weekly-generator

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题