Feishu Common

Provides shared Feishu authentication, tenant token caching, retry handling, and authenticated API request support for dependent Feishu skills.

Install this only for Feishu-related skills you trust. Keep the shared .env file and memory directory private, treat the cached tenant token as sensitive, and avoid using dependent skills that pass non-Feishu URLs into the authenticated request helper.

Type: OpenClaw Skill Name: feishu-common Version: 1.0.1 The skill bundle provides a Feishu authentication and API helper. It reads Feishu application credentials (APP_ID, APP_SECRET) from a `.env` file located two directories up (`../../.env`) and caches the tenant access token in `../../memory/feishu_token.json`. All network requests are directed to the legitimate Feishu API (`https://open.feishu.cn`). The file system and network operations are directly aligned with the stated purpose of acquiring and caching authentication tokens and making authenticated API calls. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts in SKILL.md. The use of parent directories for configuration and caching is a design choice for shared resources, not an indication of malicious intent within the skill itself, although it relies on a properly configured and sandboxed execution environment.