feishu-cli is a command-line tool for controlling the Feishu collaboration platform, including documents, knowledge bases, spreadsheets, messages, calendars, and tasks. People and AI coding agents use it to manage Feishu through commands, with particular support for converting Markdown to Feishu documents and back. Its catalogue skills provide ready-made AI-agent workflows for these operations.
Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/riba2534/feishu-clinpx agentmods add skills/riba2534/feishu-cli/feishu-cli-storageWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/riba2534/feishu-cli/feishu-cli-storage)<a href="https://agentmods.dev/skills/riba2534/feishu-cli/feishu-cli-storage"><img src="https://agentmods.dev/badge/skills/riba2534/feishu-cli/feishu-cli-storage/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/riba2534/feishu-cli/feishu-cli-storage"><img src="https://agentmods.dev/badge/skills/riba2534/feishu-cli/feishu-cli-storage.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00215 | $0.01537 |
| Opus 5.5 | $0.00086 | $0.00615 |
| Sonnet 5.5 | $0.00043 | $0.00307 |
| Haiku 4.5 | $0.00021 | $0.00154 |
Grade A, and why
feishu-cli-storage scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 15d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 49 lines — stays where its author put it; the contents beside it link to each section on GitHub.
飞书云空间
加载工作流后，将其中 references/、scripts/、templates/、examples/ 相对路径按该
workflow.md 所在目录解析；执行脚本时使用解析后的实际路径，不要依赖当前 shell 目录。
路由
| 意图 | 读取文件 |
|---|---|
| 大文件分块上传、原地覆盖上传、流式/断点下载、URL 或 wiki 包装文件下载 | references/workflows/drive/workflow.md |
解析 URL/裸 token 的类型与标题（drive inspect）、重命名文件/文件夹/文档/wiki 节点（drive update-title） |
references/workflows/drive/workflow.md |
上传文件（type=file）的版本历史与按版本下载（drive version-history/version-get） |
references/workflows/drive/workflow.md |
异步导入导出与续查（drive import/export/export-download/task-result）、文件夹移动、目录镜像（pull/push/status） |
references/workflows/drive/workflow.md |
文件夹浏览与分页、基础 file CRUD、快捷方式、元数据/统计、容量（file quota）、文档素材上传下载 |
references/workflows/file-media/workflow.md |
在线文档命名版本（file version list/create/get/delete）与上传文件回滚（file version revert） |
references/workflows/file-media/workflow.md |
| wiki 空间、节点解析（obj_token/URL）、创建/移动/复制/删除、云盘与知识库互移、成员、递归导出 | references/workflows/wiki/workflow.md |
评论列出、读取、回复、编辑回复、表情回应、解决和取消解决；创建富文本/局部/单元格/记录/幻灯片评论（drive add-comment） |
references/workflows/comment/workflow.md |
协作者、公开权限、分享密码、转移所有权、权限检查、Bot 创建后的自动授权（permission_grant）；向所有者申请权限（drive apply-permission）、密级标签（drive secure-label） |
references/workflows/perm/workflow.md |
按文件夹、知识库或创建者搜索文档（drive search）属于 feishu-cli-platform 的 search 工作流。
执行规则
/wiki/链接或类型不明的 token 先drive inspect --url解析；Bitable 链接用bitable resolve。wiki 节点交给需要 node_token 的命令前先换出 node_token（见规则 6）。- 基础文件操作优先 file/media；需要分块、断点、URL/wiki 解包、原地覆盖、版本历史、镜像或异步任务时使用 drive。
上传文件的历史版本（
drive version-history，长数字 version）与在线文档命名版本（file version）不要混用。 - 删除、移动、覆盖、
--delete-local/--delete-remote、转移所有权和删除知识空间属于高风险操作：先确认目标，再带命令的确认参数； 非交互环境未带--yes（或命令级--force）时以退出码 10 拒绝执行，不代表成功。wiki delete默认级联删除整棵子树。 - 身份：perm 全组默认 Bot，操作用户自己的文档加
--as user（不读FEISHU_USER_ACCESS_TOKEN），Bot 报 1063002/1063004 时改用 User； file/wiki 写类默认 Bot，只认显式--user-access-token，Bot 移动、删除用户自有文件会失败；comment 读与 add/resolve 默认 User 优先，comment reply add/update/react/delete默认 Bot 且必须与回复作者同身份；drive add-comment/secure-label/apply-permission、file quota、wiki space-create必须 User；drive upload/download默认要求 User，可--as bot。 - 读类或镜像命令遇 99991679（User Token 缺 drive 读 scope）时，资源对应用可见可显式
--as bot，否则补授权；带--delete-*时 已配置但不可用的 User Token 会 fail-closed，不降级 Bot。异步任务续查沿用原命令输出里的--as。 - wiki
get/update/move/export/export-tree/delete接受 node_token、已挂载文档的 obj_token 或 URL；move-to-drive、node-copy、nodes --parent、drive update-title --type wiki、perm --doc-type wiki只接受 node_token，先wiki get换出。 - Bot 身份新建文件、文件夹、文档或 wiki 节点后会自动给当前 CLI 登录用户授
full_access（JSONpermission_grant）， 交付给其他人仍需perm add。
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- evals/evals.json 5.1 KB
- references/workflows/comment/workflow.md 8.2 KB
- references/workflows/drive/workflow.md 24 KB
- references/workflows/file-media/workflow.md 8.0 KB
- references/workflows/perm/references/add_permission.md 1.6 KB
- references/workflows/perm/workflow.md 16 KB
- references/workflows/wiki/workflow.md 9.4 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 15d ago Changed · +14 lines · +18 tokens per session cecbcec84005
- 1mo ago Changed · -2 lines · +17 tokens per session f94d6baaa67f
- 1mo ago First seen · 37 lines · 180 tokens per session scan A e79385daf766
feishu-cli-storage is a skill published in the GitHub repository riba2534/feishu-cli (1,425 stars, last pushed 15d ago), licensed MIT. It adds 215 tokens to every session and 1,537 once invoked, about $0.0009 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
orbit-notion
Open Orbit briefing skill — selected by the Orbit pipeline when Notion is the user's only connected connector, or when the user explicitly scopes their daily digest to Notion. Pulls the past 24 hours of document edits, comments, mentions, and database row changes from the user's authenticated Notion connection and…
instrument-data-to-allotrope
Convert laboratory instrument output files (PDF, CSV, Excel, TXT) to Allotrope Simple Model (ASM) JSON format or flattened 2D CSV. Use this skill when scientists need to standardize instrument data for LIMS systems, data lakes, or downstream analysis. Supports auto-detection of instrument types. Outputs include full…
apify-youtube-transcript-scraper
Get YouTube captions, timestamped quotations, SRT/VTT and translated transcripts for videos, channels and playlists through the harshmaur/youtube-transcript-scraper Apify Actor.
legal-hold
Issue, refresh, release, or report on legal holds — drafts the hold notice as .docx, updates legalhold fields in log.yaml, and calendars the next refresh. Use when the user says "issue a hold", "refresh hold", "release hold", or asks for a portfolio-wide hold status report.
baoyu-youtube-transcript
A tool for downloading the written captions, subtitles, chapter information, speaker labels, and cover image from a YouTube video using its URL or ID.
feishu
Work with Feishu or Lark bots, docs, sheets, bitables, approval flows, and OpenAPI/MCP setup without hardcoding credentials.