← 返回 Skills 市场
3190
总下载
1
收藏
16
当前安装
2
版本数
在 OpenClaw 中安装
/install skill-feishu-manager
功能描述
Comprehensive Feishu (飞书) management toolkit for documents, knowledge bases, bitables, and cloud storage.
安全使用建议
This skill appears to be a Feishu connector but doesn't declare the credentials or config it needs. Before installing: 1) Verify the skill's source and trustworthiness (no homepage or publisher info provided). 2) Do not supply your production app_id/app_secret or workspace tokens until you confirm provenance; test in a sandbox Feishu app/workspace. 3) Ask the author to declare required env vars/config in the registry (where credentials will be stored) and to justify each requested scope; prefer least-privilege scopes. 4) Confirm where tokens will be stored by the agent and whether the skill will act autonomously with those tokens. 5) If you must use it, create a dedicated Feishu app with minimal permissions and rotate credentials after testing.
功能分析
Type: OpenClaw Skill
Name: skill-feishu-manager
Version: 1.0.1
The skill bundle appears benign. It provides a toolkit for managing Feishu resources (documents, wiki, bitable, drive) as described. The `SKILL.md` contains clear, functional instructions for the AI agent without any prompt injection attempts or out-of-scope commands. The `README.md` provides standard installation and setup instructions, including necessary Feishu API permissions and configuration for `app_id` and `app_secret`. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or obfuscation across any of the files.
能力评估
Purpose & Capability
The name/description match a Feishu management tool, and the SKILL.md shows actions for documents, wiki, bitable, and drive. However the registry metadata lists no required credentials or config, while README and examples refer to app_id/app_secret, doc/app tokens, and Feishu scopes. A Feishu integration legitimately needs credentials; not declaring them is an incoherence.
Instruction Scope
The SKILL.md instructions are narrowly focused on Feishu operations (feishu_doc, feishu_wiki, feishu_bitable_*, feishu_drive) and do not instruct the agent to read arbitrary local files or external endpoints. However they rely on tokens/identifiers (doc_token, app_token, folder_token) without explaining how/where these are supplied or stored, which gives the skill implicit access to potentially sensitive workspace data if credentials are provided.
Install Mechanism
This is an instruction-only skill with no install spec and no code files beyond docs, so it does not install third-party binaries or download archives. That lowers the attack surface but also means there is no executable code to audit beyond the instructions.
Credentials
No required environment variables, primary credential, or config paths are declared in registry metadata, yet README explicitly shows channel configuration (app_id/app_secret) and SKILL.md examples require tokens. The requested Feishu scopes (docx:document, wiki:wiki, drive:drive, bitable:data) are broad; failing to declare credential requirements is disproportionate and prevents proper review of what secrets the skill will use or need.
Persistence & Privilege
always:false (normal) and autonomous invocation is allowed (platform default). This is not itself a fault, but combined with the undeclared credential requirements and broad scopes it means the agent could access Feishu data autonomously once credentials are provided — consider the blast radius in that scenario.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install skill-feishu-manager - 安装完成后,直接呼叫该 Skill 的名称或使用
/skill-feishu-manager触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
Update - Fixed publish path issue
v1.0.0
Initial release
元数据
常见问题
Feishu Manager 是什么?
Comprehensive Feishu (飞书) management toolkit for documents, knowledge bases, bitables, and cloud storage. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 3190 次。
如何安装 Feishu Manager?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install skill-feishu-manager」即可一键安装,无需额外配置。
Feishu Manager 是免费的吗?
是的,Feishu Manager 完全免费(开源免费),可自由下载、安装和使用。
Feishu Manager 支持哪些平台?
Feishu Manager 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Feishu Manager?
由 limoxt(@limoxt)开发并维护,当前版本 v1.0.1。
推荐 Skills