feishu-safety-guide
One-click deployment Skill for Feishu security governance and message anti-data-leakage guide, responsible for Feishu message security, credential protection, permission auditing, interaction logging and periodic security reporting
npx skills add SafeAI-Lab-X/ClawKeeper --skill feishu-safety-guide --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# OpenClaw Feishu Safety Guide Skill Provides OpenClaw with security policies, data loss prevention mechanisms, permission controls, audit logging and periodic security reporting capabilities for operations in the Feishu environment. **Feishu Specifics:** Feishu's "file system" is **the organization's knowledge base and address book**, and what leaks are **chat records, cloud documents, contacts, approval workflows**. Once exfiltrated, they cannot be recalled. **Core Principles:** Zero friction in daily operations, high-risk operations must be confirmed by humans, regular audits with explicit reporting. **Credential Convention:** This Skill uses `$FS_TOKEN` to refer generally to Feishu API credentials, covering `app_access_token`, `tenant_access_token`, Webhook URLs, robot tokens and all high-privilege credentials. --- # I. Behavioral Blacklist and Security Audit Protocol ## 1. Behavioral Guidelines Security checks are independently executed by the AI Agent at the behavioral layer. **Agents must keep in mind: there is never absolute security, always maintain skepticism. In the Feishu scenario, "sending a message" alone is enough to cause irreversible data leakage.** ### Red Line Be
- 1. Behavioral Guidelines
- Red Line Behaviors (Must Pause and Confirm with Human if Detected)
- Yellow Line Behaviors (Permitted to Execute, Must Be Logged in Daily Memory)
- 2. Skill/MCP Installation Security Audit Protocol
- 1. Message Anti-Data-Leakage
- a) Pre-send Content Filtering (Agent Must Execute)
- b) Send Target Blacklist
- c) Feishu Cloud Document External Link Control
- 2. High-Risk Business Risk Controls
- 3. Operation Logging
- 1. Pre-execution Configuration (Skip if Already Completed)
- Configure AGENTS.md
- 2. Scheduled Auditing
- Report Format Requirements
openclaw cron add \
What does the feishu-safety-guide skill do?
One-click deployment Skill for Feishu security governance and message anti-data-leakage guide, responsible for Feishu message security, credential protection, permission auditing, interaction logging and periodic security reporting
How do I install it?
Run `npx skills add SafeAI-Lab-X/ClawKeeper --skill feishu-safety-guide --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From SafeAI-Lab-X/ClawKeeper, a repository with 1,034 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.