技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.2.7
统计：⭐ 8 · 6.1k · 212 current installs · 222 all-time installs
⭐ 8
安装量（当前） 222
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：autogame-17/feishu-doc
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill broadly matches a Feishu document reader/writer, but its metadata, runtime instructions, and shipped files are inconsistent and include cached Feishu content that may be sensitive — review before installing or providing credentials.
目的
The name/description claim a Feishu (Lark) reader/writer which legitimately needs Feishu app credentials and a Node runtime. However the registry metadata claims no required environment variables or binaries, which contradicts the SKILL.md and source (which reference FEISHU_APP_ID / FEISHU_APP_SECRET and the @larksuiteoapi node SDK). Also the package ships large cache files containing Feishu document content (including internal/wiki links and …
说明范围
SKILL.md instructs the agent to use a ../feishu-common dependency and to set FEISHU_APP_ID/FEISHU_APP_SECRET or config.json — but the registry metadata omitted these env requirements. Instructions are otherwise scoped to reading/creating/updating Feishu docs. The codebase includes many cached documents (full content) and mentions loading ../common/env; referencing a parent-sibling shared module that is not included is fragile and could cause t…
安装机制
No install spec is provided (instruction-only in metadata), yet a full Node project is included (package.json, package-lock.json, many .js files). This mismatch means the skill will rely on the runtime having Node and dependencies installed. The code imports @larksuiteoapi/node-sdk and '../common/env'; no external binary install is declared. That lack of clarity is a packaging/integrity concern but not direct evidence of malicious install beha…
证书
SKILL.md and README explicitly require FEISHU_APP_ID and FEISHU_APP_SECRET (and code references process.env.FEISHU_APP_ID/SECRET), but the registry metadata lists no required env. That is an inconsistency the user should treat as suspicious. Also the bundle already contains cached document contents and temporary download URLs — the packaged cache suggests the skill already carries external data, which is unrelated to requesting only Feishu cre…
持久
always:false (normal). The package writes/contains a cache/ directory and expects a config.json; it will persist caches and possibly tokens locally. That persistence is reasonable for a fetch/cache tool, but shipped caches with real document content increase the blast radius if the skill is granted credentials or is run in a sensitive environment. The skill does not claim to modify other skills or system-wide configs.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Feishu Doc」。简介：Fetch content from Feishu (Lark) Wiki, Docs, Sheets, and Bitable. Automatically…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/autogame-17/feishu-doc/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。