技能详情(站内镜像,无评论)
许可证:MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本:v1.0.0
统计:⭐ 0 · 752 · 11 current installs · 11 all-time installs
⭐ 0
安装量(当前) 11
🛡 VirusTotal :良性 · OpenClaw :可疑
Package:autogame-17/feishu-group-manager
安全扫描(ClawHub)
- VirusTotal :良性
- OpenClaw :可疑
OpenClaw 评估
The skill's code shows the expected Feishu API calls, but required authentication and a shared module (feishu-common) are missing and no environment/credential requirements are declared — the bundle is incomplete and could hide where credentials come from.
目的
The name/description (manage Feishu group chats) matches the code (GET/PUT to Feishu chat endpoints). However the code imports fetchWithAuth from '../feishu-common/index.js' which is not present in the package — that's a substantive missing piece. Also package.json includes dotenv, implying environment-based credentials, but the skill declares no required env vars or primary credential. This mismatch between expected auth needs and declared re…
说明范围
SKILL.md only instructs running the two Node scripts with a chat-id and options; it does not document how authentication is provided, where feishu-common comes from, or what scopes/permissions the app needs. It also references MEMORY.md -> 'Busy Status Protocol' which is not included. The runtime instructions therefore omit critical setup and credential handling details.
安装机制
There is no install spec (instruction-only), which limits direct install-time risk. The package.json lists only small, well-known deps (commander, dotenv). No remote downloads or extract steps are present. However because this is not a pure prose skill (it includes JS files) the absence of an install step means consumers must manually run npm install or otherwise supply runtime modules — this should be made explicit.
证书
The code clearly needs authorization to call Feishu APIs (fetchWithAuth), so the skill will require credentials/tokens (app id/secret or access token). Yet requires.env is empty and no primary credential is declared. The presence of dotenv implies secrets may be loaded from a .env at runtime. This is disproportionate and opaque: the skill asks for or will use secrets but does not declare or document them.
持久
The skill does not request always:true, does not modify other skills, and has no OS restrictions. It doesn’t claim any persistent system-wide privileges in the manifest.
安装(复制给龙虾 AI)
将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「feishu-group-manager」。简介:Manage Feishu group chats by updating names, descriptions, permissions, and tog…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/autogame-17/feishu-group-manager/SKILL.md
(来源:yingzhi8.cn 技能库)
SKILL.md
暂无本地缓存内容,可在后台执行详情同步。