Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add DongLiStudio/personal-agent-foundation --skill feishu-profilegit clone --depth 1 https://github.com/DongLiStudio/personal-agent-foundationWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/donglistudio/personal-agent-foundation/feishu-profile)<a href="https://agentmods.dev/skills/donglistudio/personal-agent-foundation/feishu-profile"><img src="https://agentmods.dev/badge/skills/donglistudio/personal-agent-foundation/feishu-profile/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/donglistudio/personal-agent-foundation/feishu-profile"><img src="https://agentmods.dev/badge/skills/donglistudio/personal-agent-foundation/feishu-profile.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00141 | $0.01762 |
| Opus 5 | $0.00071 | $0.00881 |
| Sonnet 5 | $0.00028 | $0.00352 |
| Haiku 4.5 | $0.00014 | $0.00176 |
Grade A, and why
feishu-profile scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 82 lines — stays where its author put it; the contents beside it link to each section on GitHub.
飞书账号与 Profile 管理
核心边界
- 新增 Profile 必须是追加操作。不得覆盖、更新、替换、重命名或删除任何已有 Profile，也不得改变新增前的 active Profile；目标名称已存在或 CLI 可能采用 update 语义时立即停止并核验。
- 执行任何飞书 CLI 操作前先确认
lark-cli可用：优先使用当前 shell 的命令发现机制，例如Get-Command lark-cli；Windows 下如命令不在 PATH，可按当前 npm 全局前缀或%APPDATA%\npm等用户级 shim 机制定位lark-cli.cmd/lark-cli.ps1，不要硬编码单一用户名路径。仍不可用时先恢复或安装 CLI，再继续 Profile 操作。 - 以
lark-cli profile list、auth status --verify、whoami和当前命令--help为实时事实；文档只保存稳定规则。 - 全局 Skill 维护方法，项目文件维护主体与资源路由事实，CLI/系统密钥链维护凭据和动态认证状态。
- 不在 Skill、GLOBAL、项目、Git、聊天或普通命令参数中保存 App Secret、access token、refresh token、device code、临时认证链接或认证缓存。
- 不维护复制 CLI 状态的 Profile 动态注册表，不硬编码历史用户
open_id。 - 不因 user 授权失败静默回退 bot，不借用其他主体的 Profile，不通过修改全局 active Profile 规避项目规则。
- 当前 workspace 的
profile list只证明该 workspace 的可见状态，不证明企业应用或其他 workspace 中的 Profile 不存在。只要 GLOBAL、项目路由或其他已核验 workspace 留有同一应用证据，就按恢复处理，禁止据此运行config init --new。
解析目标身份
按以下优先级解析，低优先级不得覆盖高优先级：
- 用户当前请求明确指定的公司、租户、账号或 Profile。
- 当前项目中与目标主体或资源直接匹配的条件化路由。
- 当前项目
AGENTS.md明确指定的项目默认 Profile。 GLOBAL/LARK_PROFILES.md记录的全局默认 Profile。
工作区绑定和 CLI active Profile 是运行状态，不是业务身份决策来源；它们只能用于核验和发现配置冲突，不得覆盖以上治理规则。项目未声明默认 Profile 时继承 GLOBAL 默认，并在后续命令中显式传入该 Profile。只有 GLOBAL 明确规定“跟随 CLI active”时，才可把 active 状态作为选择结果。
“当前一句话未提账号”不等于项目和 GLOBAL 未指定账号。目标主体不明、多个规则同级冲突或资源归属可疑时，在读取敏感数据或写入前询问用户。
状态检查与动作矩阵
每次新增、恢复、迁移、重命名或删除前，先读取对应 reference，再执行：
| 实时状态 | 动作 |
|---|---|
| Profile 存在，user 已验证 | 显式固定 --profile <name> --as user，执行前后回读身份 |
| Profile 存在，短期 token 可刷新 | 让 CLI 正常刷新，再运行 auth status --verify |
| Profile 存在，但 user 未登录、授权撤销或刷新失败 | 发起 OAuth split-flow，展示链接和 PNG 二维码 |
| 当前 workspace 不可见，但 GLOBAL、项目路由或其他 workspace 有原应用/Profile 证据 | 读取 references/recovery-and-migration.md，隔离当前进程冲突并恢复原应用；不得新建 |
| 已核验不存在既有应用/Profile，且用户明确需要新应用 | 读取 references/onboarding.md，创建具名 Profile |
| 换机、重装或 workspace 中无 Profile | 读取 references/recovery-and-migration.md |
| 全局/项目放置不明 | 读取 references/project-routing.md |
| 重命名或删除 | 读取 references/rename-and-remove.md |
| CLI 参数或行为可能随版本变化 | 先运行相应命令 --help，不凭记忆拼接参数 |
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 82 lines · 141 tokens per session scan A 701fceff52e4
feishu-profile is a skill published in the GitHub repository DongLiStudio/personal-agent-foundation (11 stars, last pushed 24d ago), licensed Apache-2.0. It adds 141 tokens to every session and 1,762 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
harbor-daytona
Use Harbor's Daytona sandbox platform for computer use — creating sandboxes, taking screenshots, sending mouse/keyboard input, and building agent loops. Use when the user wants to interact with a GUI, automate a desktop, do computer use, control a browser visually, or run Claude computer use against a Daytona sandbox.
boost-modules
Skill "boost-modules" from av/harbor, covering harbor boost custom modules, module structure, quick reference, output methods and stream text to client.
token-usage
Nested swiss-knife reference for token usage, cost, cache, and tool-call/API-call reports. Use for model cost reports, cache rates, budget/burn analysis, and tools-per-API-call trends across LingTai logs.
langgraph
LangGraph 1.x (LTS) Python workflow patterns for state management, delta channels, resilience (node timeouts, error handlers, graceful drain), routing, parallel execution, supervisor-worker, tool calling, checkpointing, human-in-loop, streaming (v2 format), subgraphs, and functional API. Use when building LangGraph…
security-arsenal
Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table. Use when you need specific payloads for XSS/SSRF/SQLi/XXE/NoSQLi/command injection/SSTI/IDOR/path-traversal/HTTP smuggling/WebSocket/MFA bypass, bypass techniques, or to check if a finding…
lc-curate-context
Decide which files a task actually needs, record that as a reusable llm-context rule, verify it against the codebase - including the files your selection references but leaves out - and pack it for your own context, a chat, or a sub-agent you dispatch. Load when choosing what code to put in front of a model, packing…