feishu-task
Feishu Task, tasklist, subtask, comment, and attachment management. Activate when user mentions tasks, tasklists, subtasks, task comments, task attachments, or task links.
How do I install this agent skill?
npx skills add https://github.com/m1heng/clawdbot-feishu --skill feishu-taskIs this agent skill safe to install?
- Gen Agent Trust Hubpass
The skill provides a suite of tools for managing Feishu tasks and tasklists. It presents potential security risks through the capability to read local files for attachment uploads and a vulnerability surface for indirect prompt injection from external content fetched from the Feishu API.
- Socketpass
No alerts
- Snykpass
Risk: LOW · No issues
- Runlayerpass
1 file scanned · No issues
- ZeroLeakspass
Score: 93/100 · 2 sections analyzed
What does this agent skill do?
Feishu Task Tools
Tools:
feishu_task_createfeishu_task_subtask_createfeishu_task_getfeishu_task_updatefeishu_task_deletefeishu_task_comment_createfeishu_task_comment_listfeishu_task_comment_getfeishu_task_comment_updatefeishu_task_comment_deletefeishu_task_attachment_uploadfeishu_task_attachment_listfeishu_task_attachment_getfeishu_task_attachment_deletefeishu_task_add_tasklistfeishu_task_remove_tasklistfeishu_tasklist_createfeishu_tasklist_getfeishu_tasklist_listfeishu_tasklist_updatefeishu_tasklist_deletefeishu_tasklist_add_membersfeishu_tasklist_remove_members
Notes
task_guidcan be taken from a task URL (guid query param) or fromfeishu_task_getoutput.comment_idcan be obtained fromfeishu_task_comment_listoutput.attachment_guidcan be obtained fromfeishu_task_attachment_listoutput.user_id_typecontrols returned/accepted user identity type (open_id,user_id,union_id).- If no assignee is specified, set the assignee to the requesting user. Avoid creating unassigned tasks because the user may not be able to view them.
- Task visibility: users can only view tasks when they are included as assignee.
- Current limitation: the bot can only create subtasks for tasks created by itself.
- Attachment upload supports local
file_pathand remotefile_url. Remote URLs are fetched with runtime media safety checks and size limit (mediaMaxMb). - Keep tasklist owner as the bot. Add users as members to avoid losing bot access.
- Use tasklist tools for tasklist membership changes; do not use
feishu_task_updateto move tasks between tasklists.
Create Task
{
"summary": "Quarterly review",
"description": "Prepare review notes",
"due": { "timestamp": "1735689600000", "is_all_day": true },
"members": [
{ "id": "ou_xxx", "role": "assignee", "type": "user" }
],
"user_id_type": "open_id"
}
Create Subtask
{
"task_guid": "e297ddff-06ca-4166-b917-4ce57cd3a7a0",
"summary": "Draft report outline",
"description": "Collect key metrics",
"due": { "timestamp": "1735689600000", "is_all_day": true },
"members": [
{ "id": "ou_xxx", "role": "assignee", "type": "user" }
],
"user_id_type": "open_id"
}
Create Comment
{
"task_guid": "e297ddff-06ca-4166-b917-4ce57cd3a7a0",
"content": "Looks good to me",
"user_id_type": "open_id"
}
Upload Attachment (file_path)
{
"task_guid": "e297ddff-06ca-4166-b917-4ce57cd3a7a0",
"file_path": "/path/to/report.pdf",
"user_id_type": "open_id"
}
Upload Attachment (file_url)
{
"task_guid": "e297ddff-06ca-4166-b917-4ce57cd3a7a0",
"file_url": "https://oss-example.com/bucket/report.pdf",
"filename": "report.pdf",
"user_id_type": "open_id"
}
Tasklist Membership For Tasks
Add Task to Tasklist
{
"task_guid": "e297ddff-06ca-4166-b917-4ce57cd3a7a0",
"tasklist_guid": "cc371766-6584-cf50-a222-c22cd9055004",
"section_guid": "6d0f9f48-2e06-4e3d-8a0f-acde196e8c61",
"user_id_type": "open_id"
}
Remove Task from Tasklist
{
"task_guid": "e297ddff-06ca-4166-b917-4ce57cd3a7a0",
"tasklist_guid": "cc371766-6584-cf50-a222-c22cd9055004",
"user_id_type": "open_id"
}
Tasklists
Tasklists support three roles: owner (read/edit/manage), editor (read/edit), viewer (read).
Create Tasklist
{
"name": "Project Alpha Tasklist",
"members": [
{ "id": "ou_xxx", "type": "user", "role": "editor" }
],
"user_id_type": "open_id"
}
Get Tasklist
{
"tasklist_guid": "cc371766-6584-cf50-a222-c22cd9055004",
"user_id_type": "open_id"
}
List Tasklists
{
"page_size": 50,
"page_token": "aWQ9NzEwMjMzMjMxMDE=",
"user_id_type": "open_id"
}
Update Tasklist
{
"tasklist_guid": "cc371766-6584-cf50-a222-c22cd9055004",
"tasklist": {
"name": "Renamed Tasklist",
"owner": { "id": "ou_xxx", "type": "user", "role": "owner" }
},
"update_fields": ["name", "owner"],
"origin_owner_to_role": "editor",
"user_id_type": "open_id"
}
Delete Tasklist
{
"tasklist_guid": "cc371766-6584-cf50-a222-c22cd9055004"
}
Add Tasklist Members
{
"tasklist_guid": "cc371766-6584-cf50-a222-c22cd9055004",
"members": [
{ "id": "ou_xxx", "type": "user", "role": "editor" }
],
"user_id_type": "open_id"
}
Remove Tasklist Members
{
"tasklist_guid": "cc371766-6584-cf50-a222-c22cd9055004",
"members": [
{ "id": "ou_xxx", "type": "user", "role": "viewer" }
],
"user_id_type": "open_id"
}
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/m1heng/clawdbot-feishu/feishu-task">View feishu-task on skillZs</a>