📦 Feishu Doc Creator — 技能工具
v1.0.0在飞书中创建各种类型的文档（多维表格、云文档、电子表格、幻灯片、思维笔记），自动命名并转移所有权，通过交互式卡片发送链接。支持特殊的周报管理模式。供 @larksuite/openclaw-lark 插件使用。
0· 20·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceThe skill's code, instructions, and resource access are coherent with its stated purpose (creating Feishu documents via a robot app and transferring ownership); it does automatically read OpenClaw config for Feishu credentials and requires elevated Feishu permissions, so review those before installing.
评估建议
This skill appears to do what it says: it uses a robot Feishu app to create documents and then transfers ownership to users. Before installing, review and accept the following: (1) Inspect scripts/create-document.py yourself (particularly ownership-transfer, permission-setting, and messaging calls) to verify behavior; (2) Confirm the Feishu app credentials stored in ~/.openclaw/openclaw.json are the correct, intended app and that you trust that app — the skill will use them automatically if you ...详细分析 ▾
✓ 用途与能力
The name/description (create Feishu docs, transfer ownership, send card links) matches the provided code and runtime instructions. Reading ~/.openclaw/openclaw.json for app_id/app_secret is consistent with the stated 'auto-read OpenClaw configuration' behavior.
ℹ 指令范围
SKILL.md and the CLI instruct the agent to call scripts/create-document.py with user_open_id and optional credentials. The script reads the OpenClaw config file and may use env vars or CLI args; this is within scope, but it means the skill will silently use any Feishu credentials present in ~/.openclaw/openclaw.json if not explicitly provided.
✓ 安装机制
Installation is a simple install.sh that copies files into the skills directory and pip-installs requirements.txt (requests). No remote downloads or untrusted URLs are used in the install script.
ℹ 凭证需求
The skill does not declare required env vars but will accept FEISHU_APP_ID/FEISHU_APP_SECRET or auto-read ~/.openclaw/openclaw.json. Accessing the OpenClaw config to obtain app credentials is justified for the purpose, but users should be aware the skill will use those secrets automatically if present.
✓ 持久化与权限
always is false and the skill does not request system-level persistence beyond being installed into the agent's skills directory. It does require Feishu app permissions (including ownership transfer and sending messages) which are necessary for its features.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/16
Initial release of Feishu Doc Creator. - Enables automated creation of Feishu documents (bitable, docx, spreadsheet, slide) via bot identity, bypassing user version limits. - Automatically names documents, transfers ownership to the acting user, and sends interactive card links. - Supports a special "wen_admin" mode for weekly report management: custom naming, transfer to a target app, add admins, and set enterprise visibility. - Reads Feishu credentials automatically from OpenClaw configuration or environment variables; no hardcoding required. - Designed for both standalone and seamless agent integration.
● 可疑
安装命令
点击复制官方npx clawhub@latest install feishu-doc-creator
镜像加速npx clawhub@latest install feishu-doc-creator --registry https://cn.longxiaskill.com