技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.5
统计：⭐ 0 · 1.4k · 15 current installs · 16 all-time installs
⭐ 0
安装量（当前） 16
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：autogame-17/feishu-message
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The code generally matches a Feishu messaging tool, but the skill's metadata and SKILL.md understate what it actually requires and what it will access (it reads a ../../.env, needs FEISHU_APP_ID/FEISHU_APP_SECRET, caches tokens to disk, and calls sibling scripts), so the package is internally inconsistent and requires caution.
目的
The name/description (Feishu messaging CLI) matches the included scripts: get, send-audio, create-chat, list-pins, etc. However, the registry metadata declares no required env vars or credentials while the code clearly requires FEISHU_APP_ID and FEISHU_APP_SECRET (and uses the Lark/Feishu SDK and HTTP APIs). Also index.js proxies to a sibling skill ('../feishu-post/send.js') that is not declared in metadata. These omissions are inconsistent wi…
说明范围
SKILL.md instructs running index.js and subcommands, which is consistent. But the runtime instructions (the code) load environment from ../../.env via dotenv, write a token cache at '../../memory/feishu_token.json', and spawn sibling scripts (../feishu-post/send.js). Reading a repository/root .env two directories up is broader than the skill's stated scope and can expose unrelated secrets. The skill also assumes presence of other skills/files …
安装机制
There is no install spec (instruction-only), which lowers installer risk. However, package.json/package-lock.json are present and list many dependencies (including @larksuiteoapi/node-sdk, axios, music-metadata). The lack of an install step is inconsistent — the code requires node modules but the registry metadata provides no guidance for installing them. This mismatch can lead to runtime failures or ad-hoc manual installs.
证书
The skill metadata declares no required env vars or primary credential, but multiple scripts require FEISHU_APP_ID and FEISHU_APP_SECRET and use dotenv to load ../../.env (an undeclared config path). These are sensitive organization-level credentials; requesting or implicitly loading them should have been declared. The skill also caches tenant access tokens to ../../memory/feishu_token.json (writes to disk). The scope of env/config access is b…
持久
always:false and normal autonomous invocation settings. The skill does write a token cache file within a relative memory path and spawns child processes, but it does not modify other skills' configurations or request persistent 'always' presence. No direct privilege escalation is observed.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「feishu-message」。简介：Unified CLI toolkit for Feishu messaging tasks including fetching messages, sen…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/autogame-17/feishu-message/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
# Feishu Message Skill
A unified toolkit for Feishu messaging operations, providing a single CLI entry point for common tasks.
## Usage
Use the unified CLI via `index.js`:
```bash
node skills/feishu-message/index.js <command> [options]
```
## Commands
### 1. Get Message (`get`)
Fetch message content by ID. Supports recursive fetching for merged messages.
```bash
node skills/feishu-message/index.js get <message_id> [--raw] [--recursive]
```
Example:
```bash
node skills/feishu-message/index.js get om_12345 --recursive
```
### 2. Send Audio (`send-audio`)
Send an audio file as a voice bubble.
```bash
node skills/feishu-message/index.js send-audio --target <id> --file <path> [--duration <ms>]
```
- `--target`: User OpenID (`ou_`) or ChatID (`oc_`).
- `--file`: Path to audio file (mp3/wav/etc).
- `--duration`: (Optional) Duration in ms.
### 3. Create Group Chat (`create-chat`)
Create a new group chat with specified users.
```bash
node skills/feishu-message/index.js create-chat --name "Project Alpha" --users "ou_1" "ou_2" --desc "Description"
```
### 4. List Pins (`list-pins`)
List pinned messages in a chat.
```bash
node skills/feishu-message/index.js list-pins <chat_id>
```
## Legacy Scripts
Standalone scripts are still available for backward compatibility:
- `get.js`
- `send-audio.js`
- `create_chat.js`
- `list_pins_v2.js`
## Dependencies
- axios
- form-data
- music-metadata
- commander