← Back to Skills Marketplace
799
Downloads
0
Stars
10
Active Installs
3
Versions
Install in OpenClaw
/install feishu-file
Description
Send local files to Feishu chats. Supports uploading and sending any file type as a Feishu file message.
README (SKILL.md)
Feishu File Sender
A skill to send local files to Feishu users or groups.
Setup
Requires Feishu App credentials. Ensure these are set in your environment or openclaw.json:
export FEISHU_APP_ID="cli_xxx"
export FEISHU_APP_SECRET="xxx"
export FEISHU_RECEIVER="ou_xxx" # Default receiver (optional)
Usage
Basic Usage
Send a file to the default receiver (configured in FEISHU_RECEIVER):
bash scripts/send_file.sh "/path/to/your/file.pdf"
Specific Receiver
Send to a specific OpenID:
bash scripts/send_file.sh "/path/to/report.xlsx" "ou_abcdef123456"
Different Receiver Types
Send to a Group (chat_id):
bash scripts/send_file.sh "/path/to/archive.zip" "oc_abcdef123456" "chat_id"
Supported types: open_id, user_id, chat_id, email.
Script Details
scripts/send_file.sh
The main script that handles the 3-step process:
- Auth: Obtains a
tenant_access_token. - Upload: Uploads the file to Feishu's internal storage using
POST /im/v1/files. - Send: Sends the file message using
POST /im/v1/messages.
Permissions Required
The Feishu App must have the following permissions:
im:message(Send and receive messages)im:message:send_as_bot(Send messages as bot)im:resource(Access and upload resources)
Usage Guidance
This skill appears to do exactly what it says: it uploads a local file and sends it to a Feishu receiver using the FEISHU_APP_ID and FEISHU_APP_SECRET you provide. Before installing or running: (1) review the script (scripts/send_file.sh) yourself — it will read whatever local file path you pass and send it to the specified receiver; avoid sending sensitive files accidentally. (2) Ensure the Feishu app has the listed permissions (im:message, im:message:send_as_bot, im:resource). (3) Store FEISHU_APP_SECRET securely; the script will print API responses on error (which could reveal tokens or error details) — remove or limit debug prints if that is a concern. (4) As with any third-party script, run it in a controlled environment first if you are unsure of its provenance.
Capability Analysis
Type: OpenClaw Skill
Name: feishu-file
Version: 1.0.1
The skill provides legitimate functionality for sending files to Feishu, but scripts/send_file.sh contains vulnerabilities due to improper input sanitization. Specifically, user-provided arguments like FILE_PATH and RECEIVER_ID are directly interpolated into curl commands and JSON payloads, which could allow for shell or JSON injection. While the script communicates only with official Feishu endpoints (open.feishu.cn) and lacks clear evidence of intentional malice, the insecure handling of inputs poses a risk.
Capability Assessment
Purpose & Capability
Name/description, required binaries (curl, jq), required env vars (FEISHU_APP_ID, FEISHU_APP_SECRET), and the included script all match the stated goal of uploading a file to Feishu and sending it as a message.
Instruction Scope
SKILL.md and scripts/send_file.sh only read the provided local file and the declared environment variables, and they call Feishu's documented endpoints (open.feishu.cn) for auth, upload, and message sending. There is no attempt to read other system files or unrelated environment variables.
Install Mechanism
No install spec (instruction-only with a bundled script). Nothing is downloaded from external/untrusted URLs and no archives are extracted; risk from install mechanism is minimal.
Credentials
Only FEISHU_APP_ID and FEISHU_APP_SECRET are required (plus an optional FEISHU_RECEIVER). These are the expected credentials for a Feishu app and are proportionate to the functionality.
Persistence & Privilege
Skill is not marked always:true, does not request system-wide changes, and does not modify other skills' configs. Autonomous invocation is the platform default and not a separate concern here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install feishu-file - After installation, invoke the skill by name or use
/feishu-file - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Fixed upload parameters (stream) and organized script structure.
v1.1.0
修复文件上传功能，支持所有常见文件类型。使用Python实现，正确处理multipart文件上传。修复了之前的上传失败问题（234001错误）。
v1.0.0
修复文件上传功能，支持所有常见文件类型
Metadata
Frequently Asked Questions
What is Feishu File Sender?
Send local files to Feishu chats. Supports uploading and sending any file type as a Feishu file message. It is an AI Agent Skill for Claude Code / OpenClaw, with 799 downloads so far.
How do I install Feishu File Sender?
Run "/install feishu-file" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Feishu File Sender free?
Yes, Feishu File Sender is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Feishu File Sender support?
Feishu File Sender is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Feishu File Sender?
It is built and maintained by xiaofei (@franklu0819-lang); the current version is v1.0.1.
More Skills