Yuqing Data To Bitable

从小爱数据接口增量拉取舆情数据，自动写入飞书多维表并支持字段映射与case_id自增功能。

This package appears to implement the described sync (pull from xiaoai API and write to Feishu Bitable), but there are important inconsistencies and transparency gaps you should address before installing: - DO NOT run it without inspecting .env: the scripts expect APP_ID, APP_SECRET (Feishu), XIAOAI_TOKEN, BITABLE_URL, FOLDER_ID, CUSTOMER_ID, etc. These are sensitive — keep them secret. - SKILL.md is wrong/incomplete: it references a non-existent entrypoint and omits the required credentials. Confirm the runtime entrypoint (main.py) and supply credentials only when you trust the code. - The skill writes local caches, logs, a status file, and a lock file in its directory. If you run it on a shared/privileged host, run in an isolated/sandboxed environment or container and ensure file permissions are appropriate. - Network endpoints used are open.feishu.cn (Feishu) and http://wisers-data-service.wisersone.com.cn (xiaoai backend). If those endpoints are unexpected for your environment, do not run it. - If you plan to deploy: test in a safe environment, verify the exact HTTP calls (you can run with a request recorder or inspect logs), and consider creating limited-scope credentials (least privilege) for Feishu. Given the metadata/entrypoint omissions, treat this skill as untrusted until you validate the files and provide credentials in a controlled manner.

Type: OpenClaw Skill Name: yuqing-data-to-bitable Version: 2.0.0 The skill bundle is a legitimate data synchronization tool designed to pull data from the XiaoAi (Wisers) API and write it to Feishu Bitable. The core logic in 'excel_to_feishu_bitable.py' and 'main.py' implements standard API authentication, data deduplication via local caching, and batch processing for performance. The included shell scripts ('sync.sh' and 'monitor.sh') provide robust maintenance features such as health checks, automated retries, and log rotation. While there is a minor naming discrepancy in the 'SKILL.md' entrypoint, the code is transparent, lacks obfuscation, and restricts network activity to the specified authorized domains.