46/100 (Medium)

OpenClaw： suspicious
VirusTotal： unknown
StaticScan： suspicious

OpenClaw： suspicious

脚本总体与“读写飞书文档”目的相符，但包内代码会要求并持久化飞书凭据、启动本地 OAuth 回调服务器并访问本地文件系统，而包的元数据没有声明这些凭据与文件访问要求，这种不一致值得注意。

VirusTotal： unknown VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774412935537,
        "_id": "k9752cadyf2gczzsrt7bvsrz0x83k510",
        "changelog": "feishu-doc v1.0.0\n\n- Major overhaul: refactored skill layout, replaced old scripts with a new modular structure and updated usage guidance.\n- Added scripts for extracting doc IDs, OAuth authorization, reading docs (including Markdown mode), summarizing, and inserting local images.\n- Simplified API usage: scripts now handle doc ID extraction and token management automatically.\n- Removed legacy root files, cache, package configs, and scripts for sheet, bitable, and block operations.\n- Updated documentation to focus on API-first workflows, clear output requirements, and practical limitations for reading, writing, and image insertion tasks.",
        "changelogSource": "user",
        "createdAt": 1774412935537,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "s1740gax0e2w0z8vj1ksw6dbhx83jhaf",
        "displayName": "Carryours",
        "handle": "carryours",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/36062794?v=4",
        "kind": "user",
        "linkedUserId": "kn7106yjq85gjertsb91trkny583j580"
    },
    "ownerHandle": "carryours",
    "skill": {
        "_creationTime": 1774412935537,
        "_id": "kd72mmdgnxqsp9wcj0stw7pvm983j5fz",
        "badges": [],
        "createdAt": 1774412935537,
        "displayName": "feishu-doc-skill",
        "latestVersionId": "k9752cadyf2gczzsrt7bvsrz0x83k510",
        "ownerPublisherId": "s1740gax0e2w0z8vj1ksw6dbhx83jhaf",
        "ownerUserId": "kn7106yjq85gjertsb91trkny583j580",
        "slug": "feishu-doc-skill",
        "stats": {
            "comments": 0,
            "downloads": 0,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "当用户提供飞书 wiki、docx、知识库页面链接，并希望读取、总结、比对、抽取内容、把结果写回飞书文档，或把本地图片插入飞书文档时使用。这个技能会先从链接中提取文档标识，优先通过飞书 OpenAPI 读取正文；做需求分析时优先输出 Markdown，调试接口结构时再输出 JSON。",
        "tags": {
            "latest": "k9752cadyf2gczzsrt7bvsrz0x83k510"
        },
        "updatedAt": 1774414776913
    }
}