feishu-doc
Feishu document read/write operations + comment management. Activate when user mentions Feishu docs, cloud docs, docx links, or document comments.
How do I install this agent skill?
npx skills add https://github.com/m1heng/clawdbot-feishu --skill feishu-docIs this agent skill safe to install?
- Gen Agent Trust Hubpass
The skill provides a suite of tools for managing Feishu documents. While functionally complete, it is vulnerable to indirect prompt injection because it reads and processes document content and comments from external sources without specific boundary markers or sanitization, which could allow maliciously crafted document content to influence the agent's actions.
- Socketpass
No alerts
- Snykwarn
Risk: MEDIUM · No issues
- Runlayerpass
2 files scanned · No issues
- ZeroLeakspass
Score: 93/100 · 2 sections analyzed
What does this agent skill do?
Feishu Document Tool
Single tool feishu_doc with action parameter for all document operations including comment management.
Token Extraction
From URL https://xxx.feishu.cn/docx/ABC123def → doc_token = ABC123def
From URL https://xxx.feishu.cn/docs/doccn123c → doc_token = doccn123c
Actions
Read Document
{ "action": "read", "doc_token": "ABC123def" }
Returns: title, plain text content, block statistics. Check hint field - if present, structured content (tables, images) exists that requires list_blocks.
Write Document (Replace All)
{ "action": "write", "doc_token": "ABC123def", "content": "# Title\n\nMarkdown content..." }
Replaces entire document with markdown content. Supports: headings, lists, code blocks, quotes, links, images ( auto-uploaded), bold/italic/strikethrough.
Limitation: Markdown tables are NOT supported.
Create + Write (Atomic, Recommended)
{
"action": "create_and_write",
"title": "New Document",
"content": "# Title\n\nMarkdown content..."
}
With folder:
{
"action": "create_and_write",
"title": "New Document",
"content": "# Title\n\nMarkdown content...",
"folder_token": "fldcnXXX"
}
Creates the document and writes content in one call. Prefer this over separate create + write.
Append Content
{ "action": "append", "doc_token": "ABC123def", "content": "Additional content" }
Appends markdown to end of document.
Create Document
{ "action": "create", "title": "New Document" }
With folder:
{ "action": "create", "title": "New Document", "folder_token": "fldcnXXX" }
Creates an empty document (title only).
List Blocks
{ "action": "list_blocks", "doc_token": "ABC123def" }
Returns full block data including tables, images. Use this to read structured content.
Get Single Block
{ "action": "get_block", "doc_token": "ABC123def", "block_id": "doxcnXXX" }
Update Block Text
{ "action": "update_block", "doc_token": "ABC123def", "block_id": "doxcnXXX", "content": "New text" }
Delete Block
{ "action": "delete_block", "doc_token": "ABC123def", "block_id": "doxcnXXX" }
List Comments
{ "action": "list_comments", "doc_token": "ABC123def", "page_size": 50 }
Returns all comments for the document. Use page_token for pagination. Comments include is_whole field to distinguish between whole-document comments (true) and block-level comments (false).
Get Single Comment
{ "action": "get_comment", "doc_token": "ABC123def", "comment_id": "comment_xxx" }
Create Comment
{ "action": "create_comment", "doc_token": "ABC123def", "content": "Comment text" }
List Comment Replies
{ "action": "list_comment_replies", "doc_token": "ABC123def", "comment_id": "comment_xxx", "page_size": 50 }
page_size should be a positive integer. If omitted, tool defaults to 50.
Comment Write Scope
Current tool provides documented comment write action create_comment (global comment creation).
For replies, use list_comment_replies for retrieval; the reply creation endpoint is not exposed in current SDK surface.
Reading Workflow
- Start with
action: "read"- get plain text + statistics - Check
block_typesin response for Table, Image, Code, etc. - If structured content exists, use
action: "list_blocks"for full data
Configuration
channels:
feishu:
tools:
doc: true # default: true
Note: feishu_wiki depends on this tool - wiki page content is read/written via feishu_doc.
Permissions
Required: docx:document, docx:document:readonly, docx:document.block:convert, drive:drive
For comment operations:
- Read comments:
docx:document.comment:read - Write comments:
docx:document.comment(optional, for create_comment)
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/m1heng/clawdbot-feishu/feishu-doc">View feishu-doc on skillZs</a>