← Back to Skills Marketplace
398
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install feishu-evolver-wrapper-local
Description
Feishu-integrated wrapper for the capability-evolver. Manages the evolution loop lifecycle (start/stop/ensure), sends rich Feishu card reports, and provides...
README (SKILL.md)
Feishu Evolver Wrapper
A lightweight wrapper for the capability-evolver skill.
It injects the Feishu reporting environment variables (EVOLVE_REPORT_TOOL) to enable rich card reporting in the Master's environment.
Usage
# Run the evolution loop
node skills/feishu-evolver-wrapper/index.js
# Generate Evolution Dashboard (Markdown)
node skills/feishu-evolver-wrapper/visualize_dashboard.js
# Lifecycle Management (Start/Stop/Status/Ensure)
node skills/feishu-evolver-wrapper/lifecycle.js status
Architecture
- Evolution Loop: Runs the GEP evolution cycle with Feishu reporting.
- Dashboard: Visualizing metrics and history from
assets/gep/events.jsonl. - Export History: Exports raw history to Feishu Docs.
- Watchdog: Managed via OpenClaw Cron job
evolver_watchdog_robust(runslifecycle.js ensureevery 10 min).- Replaces fragile system crontab logic.
- Ensures the loop restarts if it crashes or hangs.
Usage Guidance
This package contains many runnable scripts that will read workspace files, create PID/lock/log files, spawn background processes, execute shell commands, and send data to Feishu using tokens that the code expects (FEISHU_APP_ID, FEISHU_BOT_NAME, FEISHU_EVOLVER_DOC_TOKEN, and/or memory/feishu_token.json). The skill metadata does not declare those required credentials—verify them before installing. Actions to consider before running: 1) Inspect or run the code in a sandbox or isolated container; 2) Confirm where your Feishu tokens would be stored and consider creating a restricted token with minimal permissions for testing; 3) Audit any missing modules referenced (../feishu-common, ../evolver) to ensure they are honest and available; 4) Search the repo for all places that read files (memory/, logs/, assets/) to understand what might be uploaded to Feishu; 5) If you do not trust the source, do not provide production credentials and run only in a throwaway environment. The skill appears to implement its claimed features, but the omission of declared credentials and broad system access make it worth manual review before use.
Capability Analysis
Type: OpenClaw Skill
Name: feishu-evolver-wrapper-local
Version: 1.0.0
The skill bundle implements a complex 'self-evolution' loop with several high-risk behaviors that, while aligned with its stated purpose, create a significant attack surface. Key concerns include the use of 'new Function()' in 'index.js' to evaluate potentially malformed LLM output (creating an RCE vulnerability), the automatic installation of a persistence mechanism via OpenClaw's cron system in 'lifecycle.js', and an 'auto-heal' feature in 'skills_monitor.js' that executes 'npm install' on other skill directories. While the inclusion of a secret-scanning utility in 'feishu-helper.js' suggests a lack of malicious intent, the combination of broad shell execution, self-modifying git operations, and automated persistence warrants a suspicious classification.
Capability Assessment
Purpose & Capability
The code implements a Feishu integration and lifecycle/watchdog for an evolver (sending cards, creating Feishu Docs, exporting logs, running daemons). That aligns with the description. However the registry/metadata declares no required environment variables or primary credential, while the code clearly expects Feishu credentials and other environment values (FEISHU_APP_ID, FEISHU_BOT_NAME, FEISHU_EVOLVER_DOC_TOKEN, OPENCLAW_MASTER_ID, etc.). This discrepancy is unexpected and disproportionate: an integration skill should declare the API tokens it needs.
Instruction Scope
SKILL.md gives a small surface (run node index.js, lifecycle.js, visualize_dashboard.js), but the included runtime instructions (code) touch many system and workspace areas: reading memory/, logs/, assets/gep/events.jsonl, /proc, MEMORY.md, creating/removing PID and lock files, spawning background processes, and calling external CLI tools (openclaw, shell commands). The code also reads token files (memory/feishu_token.json) and uploads content to Feishu. The SKILL.md does not enumerate these behaviors or the sensitive files it reads, so the instruction scope is broader than the docs indicate.
Install Mechanism
No install spec is provided (instruction-only), which reduces installer risk. However, the bundle contains many executable JS scripts and a package.json with a local 'evolver' dependency (file:../evolver). There is no remote download in the install, but executing the included scripts will run non-trivial native operations.
Credentials
The registry declares no required env vars/credentials but the code expects and will use multiple sensitive environment variables and token files (FEISHU_APP_ID, FEISHU_BOT_NAME, FEISHU_EVOLVER_DOC_TOKEN, OPENCLAW_MASTER_ID, FEISHU token JSON in memory/feishu_token.json). The code attempts to scan for some secret patterns before sending, but the presence of many implicit/undeclared credentials and file reads is disproportionate and should be explicitly declared and justified.
Persistence & Privilege
The skill does not set always:true. It spawns background processes/daemons, writes PID and lock files under the workspace (memory/, logs/), and can self-start internal watchdogs. That behavior is consistent with a daemon wrapper, but it gives the skill the ability to persist as background processes within the host workspace—users should expect it to create/modify files and processes while running.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install feishu-evolver-wrapper-local - After installation, invoke the skill by name or use
/feishu-evolver-wrapper-local - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release – integrates Feishu reporting and management features for the capability-evolver.
- Adds Feishu card reporting via environment variable injection.
- Provides lifecycle management tools for starting, stopping, and monitoring the evolution loop.
- Includes dashboard generation and visualization from evolution history.
- Supports exporting evolution history to Feishu Docs.
- Replaces older crontab management with robust watchdog logic using OpenClaw Cron jobs.
Metadata
Frequently Asked Questions
What is Feishu Evolver Wrapper Local?
Feishu-integrated wrapper for the capability-evolver. Manages the evolution loop lifecycle (start/stop/ensure), sends rich Feishu card reports, and provides... It is an AI Agent Skill for Claude Code / OpenClaw, with 398 downloads so far.
How do I install Feishu Evolver Wrapper Local?
Run "/install feishu-evolver-wrapper-local" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Feishu Evolver Wrapper Local free?
Yes, Feishu Evolver Wrapper Local is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Feishu Evolver Wrapper Local support?
Feishu Evolver Wrapper Local is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Feishu Evolver Wrapper Local?
It is built and maintained by muguozi1 (@muguozi1); the current version is v1.0.0.
More Skills