← 返回 Skills 市场
inuyashayang

Feishu Image Sender 飞书发图指南

作者 jiao yang · GitHub ↗ · v1.0.0
cross-platform ✓ 安全检测通过
608
总下载
1
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install inuyasha-feishu-img
功能描述
Feishu IM messaging operations: send messages, images, files to users and groups via Bot API. Activate when user mentions: 飞书发图、发送图片、飞书消息、im:resource、image_k...
使用说明 (SKILL.md)

Feishu IM Tool

Use the message tool with channel=feishu for all IM operations.

Send Text Message

message(action=send, channel=feishu, target=\x3Cuser_id or chat_id>, message="text")

Send Image (CORRECT method)

Always use filePath or media, never paste a raw path in message text.

message(action=send, channel=feishu, target=\x3Cchat_id>, filePath="/absolute/path/to/image.jpg")

Or with caption:

message(action=send, channel=feishu, target=\x3Cchat_id>, media="/path/to/image.jpg", message="caption text")

The tool handles the two-step upload internally:

  1. POST /im/v1/images → get image_key
  2. POST /im/v1/messages with image_key

Common Failure Modes — Images Show as Path/Link

See references/image-sending-pitfalls.md for full diagnosis.

TL;DR root causes:

  • Assistant wrote raw file path in message text instead of calling message tool → plain text, no upload
  • Used MEDIA:/absolute/path → security filter strips it
  • image_type wrong during upload (must be message, not avatar)
  • tenant_access_token expired (TTL ~2h) → upload silently fails, key is empty
  • Webhook custom bot used instead of Bot App → no access_token, can't upload images

Permissions Required

Scope Purpose
im:resource Upload image/file to IM, get file_key / image_key
im:message Send messages with media
im:message:send_as_bot Send as bot identity

All three are currently granted on this installation.

Bot Type Comparison

Feature Webhook Custom Bot Bot App (自建应用)
Send text
Send image ⚠️ base64 only (不推荐) ✅ via image_key
access_token ❌ 无 ✅ tenant_access_token
Upload API ❌ 不支持 ✅ /im/v1/images

OpenClaw uses Bot App — always use the message tool, not raw Webhook POST.

Token Refresh

tenant_access_token expires in ~2 hours. If uploads silently fail:

  • Error code 99991663 = image_key invalid
  • Error code 99991400 = token expired

OpenClaw refreshes tokens automatically on each API call. If you see these errors, check Gateway logs.

References

安全使用建议
This skill appears to do what it says: help send images through a Feishu Bot App. Before installing, confirm that your OpenClaw Feishu channel is configured as a Bot App (has im:resource, im:message, im:message:send_as_bot) rather than a webhook. Be aware that the skill's recommended usage expects the agent to read local image file paths you provide (absolute filePath), so avoid sending sensitive images you would not want the agent or the configured bot to access. Finally, if you operate across multiple Feishu tenants, note image_key is tenant-bound and token expiry can cause intermittent failures — verify app_id/app_secret are correct in your channel configuration.
功能分析
Type: OpenClaw Skill Name: inuyasha-feishu-img Version: 1.0.0 The skill bundle defines a Feishu IM messaging tool. The `SKILL.md` and `references/image-sending-pitfalls.md` documents provide instructions for the AI agent on how to use the `message` tool to send text and images, including details on API calls and common failure modes. The documentation explicitly mentions security filters that block certain file path formats (e.g., `MEDIA:/absolute/path`), indicating an awareness and mitigation of potential file system access vulnerabilities. There are no instructions for the agent to perform malicious actions such as data exfiltration, unauthorized execution, persistence, or prompt injection designed to bypass user intent or security measures. The `filePath` parameter, while a capability that could be misused if the underlying tool is vulnerable, is a core requirement for the skill's stated purpose of sending files, and its usage is guided defensively.
能力评估
Purpose & Capability
Skill name/description (Feishu image/file sending) matches the instructions (use the platform 'message' tool, two-step upload via /im/v1/images then /im/v1/messages). However the SKILL.md instructs using absolute local file paths (filePath="/absolute/path/to/image.jpg"), which implies the agent will need read access to user files; the registry metadata lists no required config paths. This is explainable (sending an image legitimately requires reading the image file) but is a small mismatch between declared metadata and the runtime behavior described.
Instruction Scope
Instructions are narrowly scoped to Feishu IM operations: call the message tool, upload images via the upload API, and then send messages with image_key. The guide documents failure modes, error codes, and distinguishes webhook bots vs Bot App. It does not instruct the agent to read unrelated system files, exfiltrate data, or contact endpoints outside Feishu APIs (aside from referencing official docs).
Install Mechanism
No install spec or code files — instruction-only. No downloads or third-party packages are proposed, so there is no install-time risk.
Credentials
The skill declares no required environment variables or credentials; it relies on the platform's Feishu channel having im:resource, im:message, and im:message:send_as_bot scopes. The SKILL.md mentions tenant_access_token lifecycle (TTL ~2h) and that OpenClaw refreshes tokens automatically; requesting those Feishu scopes is appropriate for the described functionality. No unrelated secrets are requested.
Persistence & Privilege
Skill is not always-enabled and has no install-time persistence. It does not request modification of other skills or system-wide settings. Autonomous invocation is allowed by platform default but is not combined with other suspicious privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install inuyasha-feishu-img
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /inuyasha-feishu-img 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
飞书发图完整指南
元数据
Slug inuyasha-feishu-img
版本 1.0.0
许可证
累计安装 1
当前安装数 1
历史版本数 1
常见问题

Feishu Image Sender 飞书发图指南 是什么?

Feishu IM messaging operations: send messages, images, files to users and groups via Bot API. Activate when user mentions: 飞书发图、发送图片、飞书消息、im:resource、image_k... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 608 次。

如何安装 Feishu Image Sender 飞书发图指南?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install inuyasha-feishu-img」即可一键安装,无需额外配置。

Feishu Image Sender 飞书发图指南 是免费的吗?

是的,Feishu Image Sender 飞书发图指南 完全免费(开源免费),可自由下载、安装和使用。

Feishu Image Sender 飞书发图指南 支持哪些平台?

Feishu Image Sender 飞书发图指南 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Feishu Image Sender 飞书发图指南?

由 jiao yang(@inuyashayang)开发并维护,当前版本 v1.0.0。

💬 留言讨论