Feishu Bridge owner avatar

Feishu Bridge

Alert level: High

Connect a Feishu (Lark) bot to Clawdbot via WebSocket long-connection. No public server, domain, or ngrok required. Use when setting up Feishu/Lark as a messaging channel, troubleshooting the Feishu bridge, or managing the bridge service (start/stop/logs). Covers bot creation on Feishu Open Platform, credential setup, bridge startup, macOS launchd auto-restart, and group chat behavior tuning.

Locality:Hybrid
Data access:Sensitive
Actions:Execute
Installs 4Downloads 1312Stars 1Updated 205h ago

Why this rating

Deterministic checks triggered by the tool capabilities and evidence.

  • Locality: Hybrid

    Bridges between Feishu cloud and the local Clawdbot Gateway over WebSocket connections.

  • Data access: Sensitive

    Handles Feishu chat messages and uses secrets like the Feishu App Secret and gateway token.

  • Action surface: Execute

    Runs `node bridge.mjs` and can set up an auto-start service via launchd (start/stop/logs).

Best practices

Follow these steps to reduce risk when using this skill.

  • Store the Feishu App Secret in a locked-down file (chmod 600) and never paste it into chat logs or commit it to git.
  • Grant only the Feishu bot permissions you need and keep the Clawdbot gateway token private.
  • If enabling auto-start, review the launchd plist and monitor logs so unexpected message handling is caught quickly.

Evidence links

Public sources backing the indicator assignments.

Always be careful when navigating away from the website.

Max-risk rule

If any capability reaches a higher level, the entire indicator level bumps up to keep ratings deterministic and easy to scan.