Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add lazysheep-z/apdr-product-design-runtime --skill feishu-larkgit clone --depth 1 https://github.com/lazysheep-z/apdr-product-design-runtimeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lazysheep-z/apdr-product-design-runtime/feishu-lark)<a href="https://agentmods.dev/skills/lazysheep-z/apdr-product-design-runtime/feishu-lark"><img src="https://agentmods.dev/badge/skills/lazysheep-z/apdr-product-design-runtime/feishu-lark/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lazysheep-z/apdr-product-design-runtime/feishu-lark"><img src="https://agentmods.dev/badge/skills/lazysheep-z/apdr-product-design-runtime/feishu-lark.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00079 | $0.01238 |
| Opus 5.5 | $0.00032 | $0.00495 |
| Sonnet 5.5 | $0.00016 | $0.00248 |
| Haiku 4.5 | $0.00008 | $0.00124 |
Grade A, and why
apdr-feishu-lark scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 27d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 88 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Feishu / Lark CLI（APDR）
用官方 larksuite/cli（lark-cli）读写飞书云文档，服务 APDR 调研导入与产物发布。
安全（硬性）
- 禁止把
app_id/app_secret/ access token /open_id/ 个人cli_*配置写入本仓库、artifact、CHANGELOG、SKILL 或 git。 - 凭证只存在本机密钥链 / 用户本地 config（由
lark-cli config init/auth login管理）。 - 回答用户时：可用「已登录用户 / bot」描述身份，不要复述 token 或完整 open_id。
- 写入飞书前：确认用户意图；优先
--dry-run（若命令支持）；破坏性覆盖需二次确认。 - 禁止把个人租户域名、姓名、邮箱、手机号当「配置样例」写进仓库；文档 URL 仅在用户明确要求发布后写入
provenance。 - 公开仓库推送前：确认未暂存
projects/业务目录与任何.enc/appsecret文件（见docs/privacy.md）。
前置
# 官方 CLI（推荐）
npm install -g @larksuite/cli
# 或 npx
npx @larksuite/cli --help
# 本机首次配置与登录（交互，不在仓库里存密钥）
lark-cli config init --new
lark-cli auth login --domain docs --domain drive --no-wait --json
lark-cli auth status --json --verify
可选：全局安装官方 skills（不提交个人配置）：
npx skills add larksuite/cli -y -g
Vendor skills（只含官方说明，无密钥）
| Skill | Path |
|---|---|
| lark-shared | vendor/larksuite-cli/lark-shared/SKILL.md |
| lark-doc | vendor/larksuite-cli/lark-doc/SKILL.md |
| lark-wiki | vendor/larksuite-cli/lark-wiki/SKILL.md |
| lark-drive | vendor/larksuite-cli/lark-drive/SKILL.md |
| lark-sheets | vendor/larksuite-cli/lark-sheets/SKILL.md |
| lark-base | vendor/larksuite-cli/lark-base/SKILL.md |
| lark-slides | vendor/larksuite-cli/lark-slides/SKILL.md |
| lark-im | vendor/larksuite-cli/lark-im/SKILL.md（仅当用户明确要发群消息） |
文档操作前 必读 lark-shared，再读 lark-doc 及其 references/。
APDR 阶段映射
| 阶段 | 用法 |
|---|---|
| intake / requirements | docs +fetch 飞书需求/竞品笔记 → markdown → write_artifact |
| prd | 可选：把 approved PRD 摘要 docs +create / +update 发到飞书（JSON artifact 仍 canonical） |
| user_flows / IA | 可选从飞书知识库拉流程图说明；图仍用 diagram MCP / baoyu |
| handoff | 可选发布交接文档到飞书 Wiki/Doc；本地 HandoffDoc + ADR 仍要写入 MCP |
| quality_eval | 飞书链接只作附件引用，不替代 QualityReport |
Workflow（读）
- 用户给出飞书/Lark URL 或 token（含
#share-...时优先锚点局部读取） - Read
vendor/larksuite-cli/lark-shared/SKILL.md+lark-doc/SKILL.md lark-cli docs +fetch --doc "<url-or-token>"（按官方 skill 选--scope/--detail）- 将正文落到
projects/{projectId}/research/feishu-*.md（相对路径） - 提炼进对应 artifact 并
write_artifact
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 27d ago First seen · 88 lines · 79 tokens per session scan A 4a3d0840ac9a
apdr-feishu-lark is a skill published in the GitHub repository lazysheep-z/apdr-product-design-runtime (3 stars, last pushed 3d ago), licensed MIT. It adds 79 tokens to every session and 1,238 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-21.
Other skills, from other repositories
dcf-model
Build discounted cash flow valuation workbooks in Excel.
gog
Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs.
xlsx
Use this skill any time a spreadsheet file is the primary input or output. This means any task where the user wants to: open, read, edit, or fix an existing .xlsx, .xlsm, .xltx, .csv, or .tsv file (e.g., adding columns, computing formulas, formatting, charting, cleaning messy data); create a new spreadsheet from…
google-drive-sheets
Find, read, export, edit, and manage the user's Google Drive, Docs, Sheets, and Slides through per-user OAuth.
audit-xls
Audit a spreadsheet for formula accuracy, errors, and common mistakes. Scopes to a selected range, a single sheet, or the entire model (including financial-model integrity checks like BS balance, cash tie-out, and logic sanity). Triggers on "audit this sheet", "check my formulas", "find formula errors", "QA this…
feishu
Work with Feishu or Lark bots, docs, sheets, bitables, approval flows, and OpenAPI/MCP setup without hardcoding credentials.