📦 Feishu Send Message — 飞书发消息
v2.0.2通过当前智能体绑定的飞书应用，以配置好的机器人身份向指定用户或群组发送私聊/群聊消息，自动处理应用隔离的 open_id。
0· 105·0 当前·0 累计
by @pikaqiuyaya下载技能包
最后更新
2026/3/20
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it says: it reads the agent's local Feishu config (~/.openclaw/openclaw-{agent}.json) to obtain app_id and app_secret and posts to the official Feishu API. Before installing, verify you trust the skill source (homepage/source unknown), confirm the config files contain only expected credentials, and be aware the SKILL prints the App ID, target and message (which may end up in shell or agent logs). If you do not want the skill to read system logs to extract open_id, m...详细分析 ▾
✓ 用途与能力
Name/description (Feishu message sending) match the implementation: the script reads the agent-specific config (~/.openclaw/openclaw-{agent}.json) for appId/appSecret and calls open.feishu.cn to obtain a token and post messages. Required tools (curl/jq) listed in metadata are appropriate.
ℹ 指令范围
Instructions and the script operate within the expected scope (read agent config, call Feishu API). The SKILL.md also instructs grepping system journal logs (journalctl) to find user open_id; this is functionally necessary to obtain open_id but means the skill will access local service logs and could surface additional log contents. The script echoes App ID, target and message to stdout (may appear in logs) — not strictly required and may leak non-secret context.
✓ 安装机制
No install spec; this is an instruction-only skill with a small bash script included. No external downloads or archive extraction are performed.
ℹ 凭证需求
The skill does not request environment variables but reads local config files that contain the Feishu app_id and app_secret. Access to those files is proportionate for sending messages, but those files contain sensitive credentials (app_secret). The metadata expects jq/curl; ensure those are trusted binaries on PATH.
✓ 持久化与权限
always is false and the skill does not persist new credentials or modify other skills. It runs on-demand and does not request elevated system privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.0.22026/3/20
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install feishu-agent-messenger-v2
镜像加速npx clawhub@latest install feishu-agent-messenger-v2 --registry https://cn.longxiaskill.com