xiaoman-lark-bot飞书/Lark Bot 完整对接方案 - 所有敏感配置从环境变量读取，支持消息收发、知识库操作、Bitable 任务管理
Install via ClawdBot CLI:
clawdbot install griffithkk3-del/xiaoman-lark-botGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Sends data to undocumented external endpoint (potential exfiltration)
send → https://example.comCalls external URL not in known-safe list
https://open.larksuite.com/open-apis/auth/v3/tenant_access_token/internalAI Analysis
The skill interacts exclusively with the official Lark/LarkSuite API endpoints for its stated purpose of bot integration, with no evidence of data exfiltration to unauthorized servers, credential harvesting, or hidden malicious instructions. The 'UNKNOWN_DATA_SINK' signal appears to be a false positive, as the provided code snippets only contact 'open.larksuite.com'.
Audited Apr 17, 2026 · audit v1.0
Generated Mar 21, 2026
Automates sending daily stand-up reminders, project updates, and alerts to designated Lark group chats. Enables interactive card messages for actionable notifications like approving requests or viewing reports, streamlining internal communication.
Integrates with Lark Bitable to create, update, and track tasks directly from automated workflows. Supports syncing task statuses, assigning responsibilities, and generating progress summaries for agile project management.
Manages Lark Wiki knowledge bases by automating content updates, document retrieval, and organization. Useful for maintaining internal wikis, onboarding materials, and compliance documentation with minimal manual effort.
Sends automated responses, support tickets, or feedback requests to customers via Lark messaging. Can route inquiries to appropriate teams and log interactions in Bitable for tracking and analysis.
Generates and distributes automated reports, such as sales metrics or system health dashboards, to stakeholders through rich text cards. Allows users to access detailed data via embedded links for real-time insights.
Offers a subscription-based service that integrates this skill with existing business tools, providing custom automation for Lark messaging and Bitable management. Revenue comes from monthly fees and premium support tiers.
Provides one-time or ongoing consulting to set up and optimize the skill for specific workflows, such as task automation or knowledge base management. Revenue is generated through project-based fees and retainer contracts.
Licenses the skill as a white-label product for other companies to rebrand and integrate into their own platforms, targeting industries needing Lark automation. Revenue streams include licensing fees and customization charges.
💬 Integration Tip
Ensure all required environment variables are set before deployment, and test token retrieval and message sending in a sandbox environment first.
Scored Apr 19, 2026
Use when you need to control Slack from Clawdbot via the slack tool, including reacting to messages or pinning/unpinning items in Slack channels or DMs.
Use when you need to control Discord from Clawdbot via the discord tool: send messages, react, post or upload stickers, upload emojis, run polls, manage threads/pins/search, fetch permissions or member/role/channel info, or handle moderation actions in Discord DMs or channels.
iMessage/SMS CLI for listing chats, history, watch, and sending.
Send WhatsApp messages to other people or search/sync WhatsApp history via the wacli CLI (not for normal user chats).
OpenClaw skill for designing Telegram Bot API workflows and command-driven conversations using direct HTTPS requests (no SDKs).
WhatsApp Business API integration with managed OAuth. Send messages, manage templates, and handle conversations. Use this skill when users want to interact with WhatsApp Business. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).