📦 feishu file transfer guide — 飞书文件传输
v1.0.0通过获取飞书 tenant token，先上传本地文件得到 file_key，再用 OpenClaw 向指定飞书用户发送文件消息，实现一键文件分享。
0· 247·0 当前·0 累计
by @swingmonkey下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This is a coherent, instruction-only guide for uploading files to Feishu and appears to do what it says — it is not asking for unrelated credentials or installing code. Before using the provided code: do NOT run it verbatim in production. Key concerns: the examples disable SSL verification (allows MitM), read whole files into memory (can blow up on large files), construct multipart bodies manually (fragile), and lack error handling and secure handling of app_id/app_secret. Recommendations: (1) U...详细分析 ▾
✓ 用途与能力
Name/description claim to upload local files to Feishu; the SKILL.md shows the exact Feishu APIs (tenant_access_token, file upload, send message) and only requires local file paths and Feishu app_id/app_secret — all expected for this task.
ℹ 指令范围
Instructions focus on the three required steps (get tenant token, upload file, send message) and reference only local files and Feishu endpoints. However the example code disables SSL certificate verification (ssl_context.verify_mode = CERT_NONE), reads entire files into memory, builds multipart bodies manually, and lacks error handling or advice on secure credential handling — these are insecure or fragile practices even if relevant to the stated task.
✓ 安装机制
No install spec or external downloads; instruction-only skill means nothing is written to disk by an installer. This is the lowest install risk.
ℹ 凭证需求
The skill uses Feishu credentials (app_id/app_secret) in examples, which are appropriate, but it does not declare them as required env vars or advise secure storage. No unrelated credentials or config paths are requested.
✓ 持久化与权限
Skill is user-invocable, not always-on, does not request persistent presence or modify other skills/configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/14
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install feishu-file-transfer-guide
镜像加速npx clawhub@latest install feishu-file-transfer-guide --registry https://cn.longxiaskill.com