← 返回 Skills 市场
Zoe飞书媒体发送
作者
ye1358215818
· GitHub ↗
· v1.0.0
· MIT-0
205
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install zoe-feishu-media
功能描述
Automation skill for Zoe飞书媒体发送.
安全使用建议
Do not install blindly. Before using, ask the publisher to: (1) update registry metadata to list FEISHU_APP_ID and FEISHU_APP_SECRET as required credentials so you know what will be requested; (2) explain or include the referenced JS helper module (feishu/src/media.js) or remove the relative import—currently the JS file imports a file outside the skill bundle which could access unrelated workspace files; (3) verify that the skill only uses credentials to call official open.feishu.cn APIs (the Python code does) and does not exfiltrate data elsewhere. If you proceed, test with a throwaway Feishu app/credentials and avoid using production secrets until you've validated behavior.
功能分析
Type: OpenClaw Skill
Name: zoe-feishu-media
Version: 1.0.0
The skill provides legitimate functionality for sending local images to Feishu (Lark) groups or users via official API endpoints (open.feishu.cn). The Python script (feishu_image.py) and documentation (SKILL.md) follow security best practices by advising against hardcoding credentials and instead using environment variables. There is no evidence of data exfiltration, unauthorized execution, or malicious prompt injection.
能力评估
Purpose & Capability
The skill's stated purpose is to upload/send images to Feishu, and the Python code implements that using FEISHU_APP_ID / FEISHU_APP_SECRET. However, the registry metadata declares no required environment variables or primary credential, which is inconsistent: the skill does require Feishu credentials to function.
Instruction Scope
SKILL.md gives narrowly scoped runtime instructions (set FEISHU_APP_ID/SECRET, pip install requests, run send_image). The Python script only reads the explicit image file and the Feishu creds—expected for this purpose. Note: the JS file expects a cfg object and calls external helpers (uploadImageFeishu/sendImageFeishu) which are not part of this package; that expands runtime scope if executed in a larger repo.
Install Mechanism
There is no install spec (instruction-only); risk is low. The doc tells users to pip install requests, which is reasonable and not unusual for a small Python helper.
Credentials
Requesting FEISHU_APP_ID and FEISHU_APP_SECRET is proportionate to the stated function, but the skill package/registry failed to declare these required env vars. Additionally, the JS helper accepts a cfg parameter (OpenClaw config) and imports ../../../feishu/src/media.js — that implies the skill may rely on or access external project-level configuration/credentials if run in a larger workspace, increasing potential exposure.
Persistence & Privilege
Skill is not always-enabled, doesn't request system-wide config paths, and has no install hook. It does not request elevated persistence or modify other skills' settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install zoe-feishu-media - 安装完成后，直接呼叫该 Skill 的名称或使用
/zoe-feishu-media触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Zoe开发的飞书媒体发送skill
元数据
常见问题
Zoe飞书媒体发送 是什么？
Automation skill for Zoe飞书媒体发送. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 205 次。
如何安装 Zoe飞书媒体发送？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install zoe-feishu-media」即可一键安装，无需额外配置。
Zoe飞书媒体发送 是免费的吗？
是的，Zoe飞书媒体发送 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Zoe飞书媒体发送 支持哪些平台？
Zoe飞书媒体发送 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Zoe飞书媒体发送？
由 ye1358215818（@ye1358215818）开发并维护，当前版本 v1.0.0。
推荐 Skills