by 安全扫描
OpenClaw
安全
high confidence该技能仅作为指令型助手，专注于正确使用平台 feishu_bitable_* 工具（将 wiki node_token 解析为 app_token 并执行 CRUD 操作），其需求与指令均围绕此目的保持一致。
评估建议
This skill is internally consistent and simply documents how to use the platform's feishu_bitable_* tools correctly (notably to call feishu_bitable_get_meta first). Before enabling it: ensure your Feishu plugin/app credentials (appId/appSecret) are stored only in the trusted platform config, grant the app only the minimal Feishu scopes it needs, and test CRUD actions on non-production tables first. If you are concerned about autonomous agent actions, keep agent invocation manual or review logs/a...详细分析 ▾
✓ 用途与能力
Name/description say it helps use feishu_bitable_* tools and the SKILL.md only references those tools and the feishu plugin; requiring the feishu plugin and Feishu app permissions is appropriate for the stated purpose.
✓ 指令范围
Runtime instructions are narrowly scoped to parsing Feishu URLs (via feishu_bitable_get_meta) and then calling the feishu_bitable_* CRUD operations. The doc does not instruct reading unrelated files, exfiltrating data to other endpoints, or accessing unrelated environment variables.
✓ 安装机制
Instruction-only skill with no install spec and no code files; nothing is downloaded or written to disk by the skill itself.
✓ 凭证需求
No environment variables or credentials are declared by the skill. The SKILL.md rightly expects the platform's feishu plugin to be configured with the Feishu appId/appSecret and appropriate Feishu app scopes — this is proportional to the task.
✓ 持久化与权限
always is false and there is no request to modify other skills or system-wide settings. The skill does not ask for permanent elevated presence.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/3/18
改进文档：新增英文描述、安装指南、前置条件、权限配置说明及面向公众用户的安全注意事项
● 无害
安装命令
点击复制官方npx clawhub@latest install feishu-bitable-crud
镜像加速npx clawhub@latest install feishu-bitable-crud --registry https://cn.longxiaskill.com
技能文档
让 OpenClaw Agent 正确操作飞书多维表格，避免 token 混用导致的 91402 错误。
痛点
Agent 常把 wiki 链接里的 node_token 直接当 app_token 用，触发91402 NOTEXIST。
必须先调 feishu_bitable_get_meta 解析出真实 app_token。 安装
``bash
clawhub install feishu-bitable-crud
`
或手动放入 ~/.openclaw/workspace/skills/feishu-bitable/。 前置
- 飞书插件已启用（appId + appSecret）
- 已开通权限
- bitable:app / bitable:app:readonly
- wiki:wiki:readonly
- 多维表格「分享」里把应用加为协作者
核心规则
凡含 /wiki/ 的链接，一律先 feishu_bitable_get_meta 解析，再拿返回的 app_token 做后续操作。 URL 速览
Base 直链：https://xxx.feishu.cn/base/AppToken123→ AppToken123 即 app_tokenWiki 嵌入：https://xxx.feishu.cn/wiki/NodeToken456→ 需解析
标准流程
- 解析
`
feishu_bitable_get_meta({ url: "完整URL" })
`
得 app_token、table_id、tables - 看字段
`
feishu_bitable_list_fields({ app_token, table_id })
` - 操作
- 新增：feishu_bitable_create_record
- 查询：feishu_bitable_list_records
- 更新：feishu_bitable_update_record
- 新建表格：feishu_bitable_create_app
- 新建字段：feishu_bitable_create_field 字段类型速查
| type | type_name | 写入示例 |
|----|----|----|
| 1 | Text | "字符串" |
| 2 | Number | 123 |
| 3 | SingleSelect | "选项" |
| 4 | MultiSelect | ["A","B"] |
| 5 | DateTime | 1700000000000 |
| 7 | Checkbox | true |
| 11 | User | [{id:"ou_xxx"}] |
| 13 | Phone | "13800138000" |
| 15 | URL | {text:"",link:""}` |