Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add ntygod/ZhiWei --skill feishugit clone --depth 1 https://github.com/ntygod/ZhiWeiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/ntygod/zhiwei/feishu)<a href="https://agentmods.dev/skills/ntygod/zhiwei/feishu"><img src="https://agentmods.dev/badge/skills/ntygod/zhiwei/feishu/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/ntygod/zhiwei/feishu"><img src="https://agentmods.dev/badge/skills/ntygod/zhiwei/feishu.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00029 | $0.00560 |
| Opus 5 | $0.00015 | $0.00280 |
| Sonnet 5 | $0.00006 | $0.00112 |
| Haiku 4.5 | $0.00003 | $0.00056 |
Grade A, and why
feishu scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- 邮件发送 → `shell_exec` + curl What it actually says
飞书集成指南
channel.feishu 工具按 action 路由飞书各类操作，必须传 instanceId（用户配置过的飞书渠道实例）。
适用场景
- 飞书消息发送（个人 / 群组 / 富文本卡片）
- 飞书任务创建与管理
- 飞书文档创建 / 分享 / 内容操作
- 飞书日程查询 / 创建
- 飞书群管理（创建 / 加成员 / 设置）
不适用场景
- 邮件发送 →
shell_exec+ curl - 钉钉 / 企业微信 → 对应渠道 Skill
- 纯文档撰写不发飞书 → content-creator
- 知微对话内通知用户 → 直接说就行（或
notify）
工作流
| 用户表达 | 路径 |
|---|---|
| 发消息 / 卡片 / 回复 / 改 / 撤 | send_message / send_card / reply_message / update_message / recall_message |
| 上传 / 下载文件 | upload_file / download_file |
| 任务 / 文档 / 日程 | create_task / create_document / create_calendar_event |
| 建群 / 改群成员 | create_group / manage_members |
各路径要点：
- instanceId 优先：未配置直接提示用户去渠道实例配置页，不要伪造、不要重试
- 收件人类型对齐：
receiveIdType必须和targetId实际类型一致（chat_id / open_id / user_id），错配会直接 4xx - 二次确认：撤回消息、创建群、改群成员、含敏感信息的发送，发起前先把目标 + 内容摘要给用户、等确认
- 失败给原因：限流 / 权限不足 / 收件人不存在分别有不同错误码，参考表里有对照
详细参考
- 完整 action 参数清单与示例：
{skill_dir}/references/actions-reference.md
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 55 lines · 29 tokens per session scan A 0b450c22e82d
feishu is a skill published in the GitHub repository ntygod/ZhiWei (138 stars, last pushed 29d ago), licensed MIT. It adds 29 tokens to every session and 560 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
inbox-triage
Summarize unread Gmail messages Alfred Core has already synced, and offer to draft or schedule follow-up actions -- never sends or deletes anything on its own.
morning-brief
Render Alfred Core's deterministic morning brief and deliver a short, warm rewrite of it without changing any fact, date, or link it contains.
weekly-review
Pull together the week's open tasks, GitHub notifications, Canvas missing assignments, and remembered context into one retrospective-style summary.
orbit-notion
Open Orbit briefing skill — selected by the Orbit pipeline when Notion is the user's only connected connector, or when the user explicitly scopes their daily digest to Notion. Pulls the past 24 hours of document edits, comments, mentions, and database row changes from the user's authenticated Notion connection and…
gog
Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Tasks, Sheets, Docs, and Slides.
anyr
Use when reading, searching, creating, or updating Anytype documents (objects, spaces, types, properties, files, chats) from the command line with the configured anyr CLI, including JSON output patterns for scripting.