慧科小爱舆情数据同步

Incrementally fetch data from Huike/Xiaoai API and write to Feishu Bitable, supporting automatic partitioning for tables over 10,000 records.

This skill appears to do exactly what it says: call the Huike/Xiaoai API and write records into a Feishu Bitable. Before installing, note: (1) you must provide a Feishu APP_ID/APP_SECRET and a Xiaoai token — grant these only to a dedicated app/account with minimal permissions; (2) the skill caches tokens and key lists under a .cache directory next to the code (these files contain sensitive tokens/IDs), so avoid running it on shared machines or where others can read the skill directory; (3) network calls are limited to the Feishu open API and the configured Huike base URL (default wisers-data-service...), so review the base URL if you plan to change it; (4) review the Feishu app scopes you grant (bitable read/write) to limit blast radius. If you need higher assurance, request a review of the Feishu app permissions and verify the Xiaoai token scope and rotation policy.

Type: OpenClaw Skill Name: yuqing-sync-skill Version: 1.1.0 The skill bundle is a legitimate data synchronization tool designed to pull records from the Wisers API and push them to Feishu Bitable. It handles sensitive credentials (APP_ID, APP_SECRET, and API tokens) as expected for its stated purpose. The code in excel_to_feishu_bitable.py and sync_skill.py follows standard practices for API integration, including token caching, retry logic, and concurrency, with network access restricted to the authorized domains (open.feishu.cn and wisersone.com.cn). No malicious intent, exfiltration, or prompt injection risks were identified.