技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.1.7
统计：⭐ 0 · 860 · 10 current installs · 10 all-time installs
⭐ 0
安装量（当前） 10
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：autogame-17/feishu-post
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's code mostly matches its stated purpose (sending Feishu rich-text posts) but it omits declaring required credentials and relies on a relative 'feishu-common' dependency; there are a few implementation details (debug script, arbitrary file reads, missing install steps) that merit caution before installing or running.
目的
The name/description match the code: send.js, markdown parser, emoji map, and API calls implement Feishu Post messages. However, the skill does not declare any required environment variables/credentials even though it depends on a separate feishu-common module (mentioned in SKILL.md) which would be the component that holds Feishu API credentials. The relative dependency (utils/feishu-client.js attempts to require '../../feishu-common/index.js'…
说明范围
SKILL.md scopes the skill to sending posts and mentions installing feishu-common first. The runtime instructions and code only call Feishu endpoints (open.feishu.cn) and read message text from either --text or a provided --text-file. Caveats: the CLI writes a temp file to /tmp when given --text (expected but notable), send.js can read arbitrary file paths supplied via --text-file (user-supplied path), and debug_msg.js contains explicit code to…
安装机制
This is listed as instruction-only (no formal install spec). The package.json and package-lock.json show Node dependencies (e.g., @larksuiteoapi/node-sdk, dotenv) that would typically require npm/yarn install to run. There is no packaged install step described in SKILL.md, which may mislead users into thinking no installation is necessary. No high-risk external download URLs or extract steps were found in the provided manifest.
证书
The skill declares no required env vars, but sending messages to Feishu requires authentication. The skill delegates auth to a separate local module 'feishu-common' (loaded via a relative path), which will likely require Feishu credentials (app_id/app_secret or tokens). Because this skill does not declare those credential requirements, users may not realize that installing/using it will grant the code access to Feishu credentials and any permi…
持久
Flags show the skill is not forced-always and model invocation is enabled (normal). The skill does not request permanent presence or modify other skills' configs. It does try to load a sibling feishu-common module but does not write global config or enable itself automatically.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Feishu Post」。简介：Send rich text post messages with native emoji support and markdown-like format…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/autogame-17/feishu-post/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。