by 安全扫描
OpenClaw
安全
high confidenceThe skill's code and instructions are coherent with its stated purpose (exporting Feishu docs); it calls other OpenClaw tools to access Feishu data but does not request unrelated credentials or perform unexpected actions.
评估建议
This skill appears to do what it claims: export Feishu docs to markdown. Important notes before installing: (1) The skill delegates Feishu access by running 'openclaw tool call' for feishu_doc and feishu_drive — review those tools to confirm they are trusted and hold the expected Feishu credentials with only the listed read scopes. (2) The JS entrypoint uses execSync (shell execution) to invoke the OpenClaw CLI; ensure the OpenClaw CLI on your system is legitimate and not replaced. (3) The skill...详细分析 ▾
✓ 用途与能力
Name, description, README, SKILL.md and index.js all align: the tool lists/reads Feishu docs and writes markdown files. The SKILL.md's stated required Feishu API permissions (doc/drive read scopes) match the declared purpose. The implementation delegates Feishu access to 'openclaw tool call' for feishu_doc and feishu_drive, which is a reasonable design choice for an OpenClaw skill.
ℹ 指令范围
SKILL.md usage examples are narrowly scoped to export/list commands. The runtime code executes shell commands via child_process.execSync to call 'openclaw tool call' — this is expected for delegating to other OpenClaw tools, but it means the skill relies on those external tools' behavior. The SKILL.md does not explicitly state this delegation, so reviewers should be aware that runtime calls go through the OpenClaw CLI.
✓ 安装机制
There is no install spec; the package includes source files and a package.json (commander dependency). Nothing in the skill attempts to download or extract remote archives or install arbitrary binaries during install.
ℹ 凭证需求
The skill requests no environment variables itself, and SKILL.md lists the Feishu API scopes that are needed. In practice the skill delegates API access to feishu_doc and feishu_drive OpenClaw tools, so credentials and tokens will be managed by those tools rather than by this skill. This is proportionate but reviewers should verify the other tools' credential handling and scope.
✓ 持久化与权限
The skill is not always-enabled, is user-invocable, and does not attempt to modify agent configuration or persist auth outside its normal operation. It writes exported files to the user-specified output directory only.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/6
Initial release of Feishu Document Exporter. - Batch export Feishu documents to markdown or PDF. - Supports exporting entire folders with nested hierarchy. - Preserves document structure, formatting, and images. - Generates table of contents and supports incremental export. - Provides commands to export or list documents via CLI. - Requires Feishu API permissions for reading documents and folders.
● 无害
安装命令 点击复制
官方npx clawhub@latest install feishu-doc-exporter
镜像加速npx clawhub@latest install feishu-doc-exporter --registry https://cn.clawhub-mirror.com
技能文档
Batch export Feishu documents to markdown or PDF format, features:
- Batch export entire folders
- Preserve document structure and formatting
- Export images as local files
- Support nested folder hierarchy
- Generate table of contents
- Support incremental export
Usage
# Export single document to markdown
openclaw feishu-doc-exporter export --url "https://example.com/docx/xxx" --format markdown --output ./export# Export entire folder recursively
openclaw feishu-doc-exporter export --folder "folder_token" --format pdf --output ./export --recursive
# List all documents in a folder
openclaw feishu-doc-exporter list --folder "folder_token"
Configuration
Required Feishu API permissions:
doc:document:readdrive:folder:readdrive:file:read
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制