feishu-drive
Feishu cloud storage file management. Activate when user mentions cloud space, folders, drive.
How do I install this agent skill?
npx skills add https://github.com/m1heng/clawdbot-feishu --skill feishu-driveIs this agent skill safe to install?
- Gen Agent Trust Hubfail
The skill defines a tool for managing Feishu Drive files that is highly susceptible to Indirect Prompt Injection. It processes untrusted metadata (like file names) from an external cloud service while granting the agent the capability to delete and move files without any sanitization or boundary markers.
- Socketpass
No alerts
- Snykpass
Risk: LOW · No issues
- Runlayerwarn
1/1 file flagged
- ZeroLeakspass
Score: 93/100 · 2 sections analyzed
What does this agent skill do?
Feishu Drive Tool
Single tool feishu_drive for cloud storage operations.
Token Extraction
From URL https://xxx.feishu.cn/drive/folder/ABC123 → folder_token = ABC123
Actions
List Folder Contents
{ "action": "list" }
Root directory (no folder_token).
{ "action": "list", "folder_token": "fldcnXXX" }
Returns: files with token, name, type, url, timestamps.
Get File Info
{ "action": "info", "file_token": "ABC123", "type": "docx" }
Searches for the file in the root directory. Note: file must be in root or use list to browse folders first.
type: doc, docx, sheet, bitable, folder, file, mindnote, shortcut
Create Folder
{ "action": "create_folder", "name": "New Folder" }
In parent folder:
{ "action": "create_folder", "name": "New Folder", "folder_token": "fldcnXXX" }
Move File
{ "action": "move", "file_token": "ABC123", "type": "docx", "folder_token": "fldcnXXX" }
Delete File
{ "action": "delete", "file_token": "ABC123", "type": "docx" }
File Types
| Type | Description |
|---|---|
doc | Old format document |
docx | New format document |
sheet | Spreadsheet |
bitable | Multi-dimensional table |
folder | Folder |
file | Uploaded file |
mindnote | Mind map |
shortcut | Shortcut |
Configuration
channels:
feishu:
tools:
drive: true # default: true
Permissions
drive:drive- Full access (create, move, delete)drive:drive:readonly- Read only (list, info)
Known Limitations
- Bots have no root folder: Feishu bots use
tenant_access_tokenand don't have their own "My Space". The root folder concept only exists for user accounts. This means:create_folderwithoutfolder_tokenwill fail (400 error)- Bot can only access files/folders that have been shared with it
- Workaround: User must first create a folder manually and share it with the bot, then bot can create subfolders inside it
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/m1heng/clawdbot-feishu/feishu-drive">View feishu-drive on skillZs</a>