📦 Feishu Doc Manager — 飞书文档管理
v1.0.0一键将 Markdown 内容批量发布到飞书文档，自动解析表格并保留格式，同时支持权限继承与批量写入，解决文档迁移与协作痛点。
22· 1.3万·147 当前·152 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceThe skill's description matches a Feishu document manager, but the runtime instructions are incomplete and inconsistent (no declared credentials, yet the skill needs Feishu API scopes and tells you to git-clone a GitHub repo), so it requires clarification before use.
评估建议
This skill could be legitimate, but it has important gaps and a risky instruction. Before installing or running it: 1) Ask the author or maintainer to provide a complete SKILL.md that documents the auth flow (exact environment variables or secrets needed, how tokens are obtained/renewed, and where they're stored). 2) Request an install spec or include the code in the skill bundle so you don't have to git-clone at runtime; if you must clone, review the repo code yourself (or in a sandbox) before ...详细分析 ▾
⚠ 用途与能力
The skill claims to publish Markdown to Feishu Docs and manage permissions; the listed Feishu API scopes (docx:document, docx:document:write_only, docs:permission.member) are consistent with that purpose. However, the bundle declares no required environment variables or primary credential even though Feishu API access requires app credentials/tokens. That mismatch is a sign of incomplete/incoherent packaging.
⚠ 指令范围
SKILL.md contains a Quick Start that instructs the user/agent to run a git clone of a GitHub repo into ~/.openclaw/workspace/skills. The instructions do not explain the auth flow (where to provide Feishu app id/secret or tokens), do not document how credentials are stored, and offer no guidance for safe execution. Recommending an external repo clone in runtime instructions without bundled code or auth details is scope creep and ambiguous.
ℹ 安装机制
There is no formal install spec in the registry (instruction-only skill). The SKILL.md suggests cloning https://github.com/Shuai-DaiDai/feishu-doc-manager — GitHub is a known host (lower risk than arbitrary IPs), but the registry package contains no code files itself, so the agent would fetch external code at runtime. That increases risk and should be made explicit and vetted before execution.
⚠ 凭证需求
The skill requests Feishu API permission scopes but declares zero required environment variables or primary credential. Real operation will need app credentials / tenant_access_token / refresh tokens or similar. The absence of declared credential requirements is disproportionate and ambiguous (where should secrets be put? how are they obtained?).
✓ 持久化与权限
The skill does not request always: true and makes no claims to modify other skills or system-wide settings. It appears to be user-invocable only and does not request elevated persistence in the provided metadata.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/9
📄 Feishu Doc Manager | 飞书文档管理器 Seamlessly publish Markdown content to Feishu Docs with automatic formatting. 将 Markdown 内容无缝发布到飞书文档，自动渲染格式。 🎯 Problems Solved: • Markdown tables auto-convert to formatted lists • One-click permission management • Batch writing for long content ✨ Features: • Smart Markdown publishing • Permission management • Document operations
● 可疑
安装命令
点击复制官方npx clawhub@latest install feishu-doc-manager
镜像加速npx clawhub@latest install feishu-doc-manager --registry https://cn.longxiaskill.com