feishu-cli is a command-line tool for controlling the Feishu collaboration platform, including documents, knowledge bases, spreadsheets, messages, calendars, and tasks. People and AI coding agents use it to manage Feishu through commands, with particular support for converting Markdown to Feishu documents and back. Its catalogue skills provide ready-made AI-agent workflows for these operations.
Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/riba2534/feishu-clinpx agentmods add skills/riba2534/feishu-cli/feishu-cli-workWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/riba2534/feishu-cli/feishu-cli-work)<a href="https://agentmods.dev/skills/riba2534/feishu-cli/feishu-cli-work"><img src="https://agentmods.dev/badge/skills/riba2534/feishu-cli/feishu-cli-work/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/riba2534/feishu-cli/feishu-cli-work"><img src="https://agentmods.dev/badge/skills/riba2534/feishu-cli/feishu-cli-work.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00211 | $0.01206 |
| Opus 5.5 | $0.00084 | $0.00482 |
| Sonnet 5.5 | $0.00042 | $0.00241 |
| Haiku 4.5 | $0.00021 | $0.00121 |
Grade A, and why
feishu-cli-work scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 15d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
飞书工作管理
加载工作流后，将其中 references/、scripts/、templates/、examples/ 相对路径按该
workflow.md 所在目录解析；执行脚本时使用解析后的实际路径，不要依赖当前 shell 目录。
路由
| 意图 | 读取文件 |
|---|---|
| 日程查询（agenda / event-search）、日程增删改与重复日程、参与人与会议室、忙闲/智能时段/会议室查找、接受/拒绝邀请、日程分享与转让组织者 | references/workflows/calendar/workflow.md |
| 任务、子任务与父任务、成员、提醒、评论、附件、分组（section）、我的/相关任务、任务搜索、任务清单 | references/workflows/task/workflow.md |
| 审批定义、实例（发起/撤回/抄送/我发起的）、任务（待办查询、通过/拒绝/转交/退回/加签/催办） | references/workflows/approval/workflow.md |
| 打卡记录和考勤统计 | references/workflows/attendance/workflow.md |
| OKR 周期、目标/关键结果创建与更新、进展、评论；量化指标走 api 透传 | references/workflows/okr/workflow.md |
执行规则
- 会影响他人或不可撤销的操作（邀请参与人、审批动作、OKR 写入、转让组织者、删除）执行前展示目标与关键参数，
能
--dry-run的先预览，得到用户确认再执行；非交互环境需要确认的命令不带--yes会以 exit 10 退出且不执行。 - 身份：
task my|search|related、全部审批命令、calendar rsvp|event-reply、okr comment create必须使用 User Token； 日历与任务的写命令--as默认 auto（已登录即本人身份，此前版本默认 Bot）；OKR 命令组默认--as bot；其他按各工作流说明。 - 重复日程的修改/删除先让用户确认范围（
--apply-to single|all|this-and-following），不要替用户默认；all/this-and-following需--yes。event-transfer不可撤销，重复日程还需--transfer-series。 - 看某段时间的安排用
calendar agenda（展开重复日程、过滤已取消），不要用list-events；没有明确时间的排会先calendar suggestion再对选定时段room-find。 - 时间格式以命令帮助为准：日历时间点优先带时区的 RFC3339，CLI 不能创建全天日程（
YYYY-MM-DD会变成当天 00:00 的时段）；suggestion/room-find只收 RFC3339；考勤日期只用YYYY-MM-DD/YYYYMMDD；任务--due纯日期是当天 00:00。 - 审批
task query/instance initiated与task related是稀疏分页：空页或不足一页不代表没有数据，以has_more为准， 需要完整结果用--page-all；审批的count不是总数。 - 任务清单添加/移除任务使用
task-add/task-remove，不存在add-task/remove-task。
删除、覆盖类命令返回退出码 10 时，向用户确认目标与影响后追加全局 --yes 重跑，不要自行添加。身份或 scope 报错（如 99991663/99991668/99991672/99991679）读取 ../feishu-cli-platform/references/workflows/auth/references/identity.md；判断成败、编写脚本或处理确认门禁读取 ../feishu-cli-platform/references/workflows/auth/references/agent-contract.md。
What ships with it
9 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- evals/evals.json 7.1 KB
- references/workflows/approval/references/form-control-values.md 5.0 KB
- references/workflows/approval/workflow.md 16 KB
- references/workflows/attendance/workflow.md 5.3 KB
- references/workflows/calendar/references/basic-commands.md 10.0 KB
- references/workflows/calendar/workflow.md 16 KB
- references/workflows/okr/workflow.md 13 KB
- references/workflows/task/references/commands.md 5.9 KB
- references/workflows/task/workflow.md 6.4 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 15d ago Changed · +5 lines · +27 tokens per session dfb558521caa
- 1mo ago Changed · +18 tokens per session f9e9cc0c0f32
- 1mo ago First seen · 36 lines · 166 tokens per session scan A aace58cdd051
feishu-cli-work is a skill published in the GitHub repository riba2534/feishu-cli (1,425 stars, last pushed 15d ago), licensed MIT. It adds 211 tokens to every session and 1,206 once invoked, about $0.0008 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
story-readiness
Checks whether a story is ready to implement: clear acceptance criteria, no open questions, valid ADR and dependencies. Use when the user asks if a story, or the sprint's stories, are ready to start or build.
recipe-create-meet-space
Create a Google Meet meeting space and share the join link.
atmos-config
Atmos root configuration: atmos.yaml discovery, precedence, deep merging, basepath, imports, minimal bootstrap, and routing to narrower Atmos skills.
workthreads
SpecStory Workthreads - a weekly work-thread rollup across a team's repos from SpecStory coding histories (any agent - Claude Code, Codex, Cursor, Gemini, and more). It groups the window's sessions into threads of work per project and labels each new / open / recently closed, so a lead sees what shipped, what is still…
qa-project-bootstrap
Onboard a new QA engineer to an existing codebase, or audit an existing test architecture. Produces a 30-day ramp plan: codebase orientation, framework walkthrough, test architecture audit, mentorship pairing, and first-test guidance. Use when: "QA onboarding," "new tester," "ramp up," "test architecture audit,"…
handle-linkedin-connection-request-signal
Use this skill when someone sends a team member an inbound LinkedIn connection request. An inbound request is a deliberate, ACTIVE first-party intent signal — meaningfully stronger than a passive profile view — and it deserves different scoring rules. The skill resolves and enriches the requester, gates them through…