by 安全扫描
OpenClaw
安全
high confidenceThe skill does what it claims: a local helper that reads/writes your OpenClaw (~/.openclaw) configuration and creates agent workspace directories for the @larksuite/openclaw-lark plugin — it does not request external credentials or perform unexplained network activity.
评估建议
This tool is a local configuration helper: it will create directories under ~/.openclaw and write agent/account entries (including Feishu AppId/AppSecret) to ~/.openclaw/openclaw.json. Before running: (1) confirm you trust the author because the script will store full app secrets locally; (2) back up your existing ~/.openclaw/openclaw.json; (3) ensure the 'openclaw' CLI on your system is the expected official tool (the script invokes it to check plugins); (4) if you want secrets stored elsewhere...详细分析 ▾
✓ 用途与能力
The name/description describe batch-creating/configuring Lark/Feishu agents for the @larksuite/openclaw-lark plugin. The included Python script exclusively manipulates ~/.openclaw configuration, creates workspace/agent directories, and checks whether the plugin is installed — all consistent with the stated purpose.
✓ 指令范围
SKILL.md and the script limit actions to collecting agent metadata, validating ids/reply modes, writing to ~/.openclaw/openclaw.json, creating workspace/agent files under ~/.openclaw, and optionally calling the local 'openclaw' CLI to check installed plugins. There are no instructions to read unrelated system files, transmit data to external endpoints, or gather extraneous secrets.
✓ 安装机制
There is no install spec; this is instruction + local script only, so nothing is downloaded or executed from remote URLs. The script uses standard local filesystem operations and subprocess calls to the 'openclaw' CLI (expected for managing OpenClaw plugins).
✓ 凭证需求
The skill declares no required environment variables or credentials. It asks the user to provide Feishu/App credentials (AppId and AppSecret) as part of agent creation, and writes those into ~/.openclaw/openclaw.json — this is proportional to its function. The README notes secrets are masked in output; the full secret is stored locally (as expected for account configuration).
✓ 持久化与权限
always is false and the skill does not request system-wide privileges. It writes only to its own OpenClaw config area (~/.openclaw) and creates workspace/agent directories under that path. It does not modify other skills' configs or enable persistent/hidden remote access.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/14
Initial release: Multi-agent batch configuration for the official @larksuite/openclaw-lark plugin. - Guides users to batch add or configure Feishu (Lark) agents with fields exclusive to the official plugin (threadSession, replyMode, blockStreaming, etc.). - Auto-checks @larksuite/openclaw-lark plugin installation before operation. - Supports dry-run preview and interactive information gathering. - Separate per-agent and channel-level options, with clear JSON structure and command-line workflows. - Ensures plugin safety: agentId validation, local credential storage, app secret masking.
● 无害
安装命令 点击复制
官方npx clawhub@latest install lark-multi-agent-factory
镜像加速npx clawhub@latest install lark-multi-agent-factory --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制