← 返回 Skills 市场
111
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install openclaw-feishu-mcp
功能描述
Use when user asks about Feishu MCP (Model Context Protocol) integration for AI agents. Provides cloud document operations with native MCP tool schema. Use f...
安全使用建议
Do not blindly paste the provided appID/appSecret into your config. The SKILL.md embeds an appSecret yet the registry lists no required credentials — this mismatch is suspicious. Before installing: (1) verify the skill publisher and source (there's no homepage/repo listed); (2) treat the included appSecret as untrusted — either replace it with credentials you control or confirm it's a harmless placeholder; (3) confirm the mcpUrl (https://feishu-openai-mcp-proxy.bytedance.net) is the intended endpoint for your organization; (4) backup ~/.openclaw/openclaw.json before making changes; (5) prefer supplying credentials via a secure channel (env or secret store) rather than embedding them into README-like instructions; (6) if you cannot verify the origin or the credential's legitimacy, avoid enabling this skill or isolate its usage (network restrictions, limited-permission Feishu app).
功能分析
Type: OpenClaw Skill
Name: openclaw-feishu-mcp
Version: 1.0.0
The skill bundle contains hardcoded sensitive credentials, specifically an `appID` and `appSecret` (BiL8CymBwxiA998MXxvUKbN23RhPsxAg), within the configuration instructions in SKILL.md. While the document management tools (read/write/create) align with the stated purpose, providing static credentials for a specific Feishu application is a high-risk practice that could lead to data interception or unauthorized access. The use of a specific proxy URL (feishu-openai-mcp-proxy.bytedance.net) further suggests a non-standard integration that should be treated with caution.
能力评估
Purpose & Capability
The SKILL.md legitimately describes a Feishu MCP integration and needs an appID/appSecret to function, but the skill metadata declares no required credentials or primary credential. The file includes a hard-coded appSecret and mcpUrl (a ByteDance/Feishu proxy) — embedding a secret in the instructions is unexpected and disproportionate to a simple instruction-only plugin.
Instruction Scope
The runtime instructions explicitly instruct the user/agent to modify the user's ~/.openclaw/openclaw.json and place the appID/appSecret there. Writing credentials into a user config file is sensitive behavior. Aside from that, the actions (read/create/append/write documents and tables) stay within the stated Feishu MCP scope and do not request unrelated system files.
Install Mechanism
No install spec or code files are present (instruction-only), so nothing is downloaded or executed on install. This lowers risk from arbitrary code installation.
Credentials
The skill requires authentication (appID/appSecret) to operate but the registry metadata lists no required environment variables or primary credential. A hard-coded appSecret appears in the instructions — either this is a leaked/embedded secret or a placeholder, but either way it is inconsistent with the metadata and raises a risk of credential leakage or misuse.
Persistence & Privilege
The skill does not set always:true and is user-invocable (normal). It instructs writing to the OpenClaw config (~/.openclaw/openclaw.json) to enable the plugin — that is its own configuration and a typical persistence mechanism for plugins, but it is still a privileged operation (modifying a user config and storing credentials).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-feishu-mcp - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-feishu-mcp触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of Feishu MCP integration for OpenClaw.
- Adds support for cloud document operations (read, write, create) via Feishu MCP (Model Context Protocol).
- Enables reading and writing tables, as well as appending content in Feishu documents.
- Provides clear JSON configuration for connecting with Feishu OpenAPI using appID and appSecret.
- Supports automatic tool invocation in OpenClaw for Feishu document actions.
- Requires Feishu OpenClaw plugin and proper app permissions.
元数据
常见问题
OpenClaw FEISHU MCP 是什么？
Use when user asks about Feishu MCP (Model Context Protocol) integration for AI agents. Provides cloud document operations with native MCP tool schema. Use f... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 111 次。
如何安装 OpenClaw FEISHU MCP？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-feishu-mcp」即可一键安装，无需额外配置。
OpenClaw FEISHU MCP 是免费的吗？
是的，OpenClaw FEISHU MCP 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
OpenClaw FEISHU MCP 支持哪些平台？
OpenClaw FEISHU MCP 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 OpenClaw FEISHU MCP？
由 cry779（@cry779）开发并维护，当前版本 v1.0.0。
推荐 Skills