Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/foxzool/openlark/openlark-api-validationnpx skills add foxzool/openlark --skill openlark-api-validationgit clone --depth 1 https://github.com/foxzool/openlarkWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/foxzool/openlark/openlark-api-validation)<a href="https://agentmods.dev/skills/foxzool/openlark/openlark-api-validation"><img src="https://agentmods.dev/badge/skills/foxzool/openlark/openlark-api-validation.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00081 | $0.03427 |
| Opus 5 | $0.00041 | $0.01714 |
| Sonnet 5 | $0.00016 | $0.00685 |
| Haiku 4.5 | $0.00008 | $0.00343 |
Grade A, and why
openlark-api-validation scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 292 lines — stays where its author put it; the contents beside it link to each section on GitHub.
OpenLark API 覆盖率验证技能
🧭 技能路由指南
本技能适用场景:
- 需要统计某个 crate/bizTag 的 API 覆盖率
- 需要输出缺失 API 清单与完成率报告
- 需要对比
api_list_export.csv与实际落盘实现
其他技能:
- 项目级规范体检(架构/API/导出/校验一体)→
Skill(openlark-code-standards) - 新增/重构具体 API →
Skill(openlark-api) - 字段正确性核对(文档 vs 代码)→
Skill(openlark-api-field-verify) - 审查整体架构与公共 API 收敛 →
Skill(openlark-design-review)
关键词触发映射
- 覆盖率、缺失 API、实现数量、CSV 对比、验证脚本、报告 →
openlark-api-validation - 字段核对、文档字段、playwright →
openlark-api-field-verify - 新增 API、重构 API、Builder、Request/Response、mod.rs 导出 →
openlark-api - 代码规范、规范检查、风格一致性、体检 →
openlark-code-standards - 架构设计、public API、收敛方案、feature gating、兼容策略 →
openlark-design-review - validate、必填校验、validate_required、空白字符串、校验聚合 →
openlark-validation-style
双向跳转规则
- 本技能只回答「文件在不在」;若要核对字段是否与飞书文档一致,转
openlark-api-field-verify。 - 若发现缺失 API 的根因是架构分层/范式混乱,转
openlark-design-review。 - 若发现问题是具体 API 尚未实现,转
openlark-api落地实现。 - 若需要把覆盖率问题归因到全仓规范一致性,转
openlark-code-standards。
🎯 技能用途
本技能用于验证 OpenLark 项目中各 crate 的 API 实现覆盖率,通过对比 api_list_export.csv 中的 API 定义与实际代码实现,生成详细的覆盖率报告。
📋 快速工作流
1. 验证单个 crate 的 API 覆盖率
# 验证 openlark-docs crate
python3 tools/validate_apis.py --crate openlark-docs
# 验证 openlark-communication crate
python3 tools/validate_apis.py --crate openlark-communication
# 验证 openlark-meeting crate
python3 tools/validate_apis.py --crate openlark-meeting
输出位置: reports/api_validation/{crate}.md
2. 列出所有可用的 crate 映射
# 查看所有 crate → bizTag 映射
python3 tools/validate_apis.py --list-crates
示例输出(以实际 --list-crates 输出为准):
📄 映射文件: tools/api_coverage.toml
- openlark-analytics: src=crates/openlark-analytics/src biz_tags=[search, report]
- openlark-application: src=crates/openlark-application/src biz_tags=[application, workplace]
- openlark-auth: src=crates/openlark-auth/src biz_tags=[auth, passport, verification_information, human_authentication]
...
映射共 15 个 crate(核对自
tools/api_coverage.toml)。新增 crate 时,在tools/api_coverage.toml追加[crates.<name>]段(src+biz_tags,可选dashboard_groups)即自动纳入--crate/--all-crates/--list-crates,无需改脚本。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 292 lines · 81 tokens per session scan A 93465c73a45e
openlark-api-validation is a skill published in the GitHub repository foxzool/openlark (105 stars, last pushed yesterday), licensed Apache-2.0. It adds 81 tokens to every session and 3,427 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
larksnap-fetch
把飞书/Lark 文档或普通网页抓取并保存到本地,也能编辑用户有权限的飞书文档,并用已登录浏览器执行一次网页搜索。用户要求下载、导出、抓取、写入飞书文档,或联网搜索资料/参考链接时使用本技能,即使没有提到 larksnap。底层通过技能自带 daemon 桥接已登录的 larksnap 浏览器扩展;arXiv 使用独立脚本。.
lark-sheets
飞书电子表格:创建和操作电子表格。支持创建表格、管理工作表与行列结构(增删/合并/调整尺寸/隐藏/冻结)、读写单元格(值/公式/样式/批注/单元格图片)、查找替换、多操作原子批量更新,以及图表、透视表、条件格式、筛选器、迷你图、浮动图片等对象的创建与维护。当用户需要创建电子表格、管理工作表、批量读写或编辑数据、统计汇总与可视化、表格美化、公式计算(含 Excel 公式迁移)、金融/财务建模(DCF、三张表、预算、Sensitivity 等)等任务时使用。若用户是想按名称或关键词搜索云空间(云盘/云存储)里的表格文件,请改用 lark-drive 的 larkdrivesearch 先定位资源。当用户给出 doubao.com 的…
lark-drive
飞书云空间(云盘/云存储):管理 Drive 文件和文件夹,包含上传/下载、创建文件夹、复制/移动/删除、查看元数据、评论/权限/订阅、标题、版本和本地文件导入。用户需要整理云盘目录、处理云空间资源 URL/token、判断链接类型/真实 token/标题,或导入 Word/Markdown/Excel/CSV/PPTX/.base 为 docx/sheet/bitable/slides 时使用;doubao.com 云空间 URL/token 也按资源路径和 token 路由,不回退 WebFetch。不负责:文档内容编辑(走 lark-doc)、表格/Base 表内数据操作(走…
lark-vc
飞书视频会议:搜索历史会议记录、查询会议纪要(总结/待办/章节/逐字稿)、查询参会人快照。当用户查询已结束的会议、获取会议产物(纪要/妙记)、查看参会人时使用;查询未来日程走 lark-calendar。不负责:Agent 真实入会/离会、会中实时事件(走 lark-vc-agent)。.
lark-minutes
飞书妙记:搜索妙记、查看妙记基础信息、下载/上传音视频、读取或编辑妙记的产物内容、改标题、替换说话人/关键词。当给出minutetoken、本地音视频文件,要查/改/转妙记产物时使用;本地音视频转纪要/逐字稿优先走本 skill,不要用 ffmpeg/whisper 本地转写。不负责:获取会议关联妙记,或仅按自然语言标题定位纪要.
lark-slides
飞书幻灯片:创建和编辑幻灯片。创建演示文稿、读取幻灯片内容、管理幻灯片页面(创建、删除、读取、局部替换)。当用户需要创建或编辑幻灯片、读取或修改单个页面时使用。当用户给出 doubao.com 的 /slides/ URL/token 时,也应直接使用本 skill,不要因为域名不是飞书而回退到 WebFetch;路由依据是 URL 路径模式和 token,而不是域名。不负责:云文档内容编辑(走 lark-doc)、云文档里的独立画板对象(走 lark-whiteboard,注意 slide 内嵌的流程图/架构图仍属本 skill)、上传或下载普通文件(走 lark-drive)。.