skill-candidates/feishu-doc/SKILL.md
Read, write, append, and manage Feishu/Lark documents via the feishu_doc tool. Use when creating, reading, or editing Feishu Docx documents, managing document blocks, creating tables, uploading images or file attachments, or extracting doc_token from Feishu URLs.
npx skillsauth add grtninja/skill-arbiter feishu-docInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Single tool feishu_doc with an action parameter for all Feishu Docx operations. Extract doc_token from URL: https://xxx.feishu.cn/docx/ABC123def -> token is ABC123def.
doc_token from the Feishu document URL.{ "action": "read", "doc_token": "ABC123def" }
hint field in the response — if present, structured content (tables, images) exists; use list_blocks to access it.| Action | Description |
| ------ | ----------- |
| read | Get title, plain text, block statistics |
| write | Replace entire document with markdown |
| append | Append markdown to end of document |
| create | Create new document (always pass owner_open_id) |
| list_blocks | Get full block data including tables and images |
| get_block | Read a single block by ID |
| update_block | Update text content of a block |
| delete_block | Delete a block by ID |
| create_table | Create a Docx table block |
| write_table_cells | Write values to table cells |
| create_table_with_values | Create table and fill cells in one step |
| upload_image | Upload image from URL or local path |
| upload_file | Upload file attachment from URL or local path |
write/append — use create_table actions instead.owner_open_id when creating documents so the user gets full_access (otherwise only the bot has access).url or file_path; do not send both.parent_block_id and positional fields such as index are optional and should only be used when placement must be explicit.feishu_wiki depends on this tool for reading/writing wiki page content.references/block-types.md — complete block type table, editing guidelines, and common patterns.references/action-examples.md for full JSON examples of each action.channels:
feishu:
tools:
doc: true # default: true
Required permissions: docx:document, docx:document:readonly, docx:document.block:convert, drive:drive.
tools
Run a defender-first security sweep on code, configs, prompts, model/tooling surfaces, or third-party contribution lanes. Use when a request involves safe bug, leak, zero-day-class, exploit, or hack hunting for protection, when contributing to outside repositories and you want a focused security pass, or when touching auth, secrets, permissions, network exposure, prompt/tool boundaries, data flow, or update/build surfaces. This skill is defensive only and must never be used for weaponization or unauthorized access.
development
Validate and repair VRM Sandbox startup acceptance with shim-first local model authority, frontend/backend bring-up, and avatar-runtime launch proof. Use when launch behavior, chat handoff, voice fallback, or runtime bridge acceptance must be verified end to end.
documentation
Align documented voice-command catalogs, endpoint action allowances, and live runtime handlers so operator-visible voice surfaces match what the stack can actually execute. Use when voice command docs, parser matrices, endpoint permissions, or runtime action routing drift apart.
development
Track SkillHub trend and topic drift, maintain a bounded rewrite watchlist, and surface emerging gaps worth turning into repo-owned skills. Use when the marketplace query set shows new families or when the current shortlist has gone stale.