Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add smallnest/goclaw --skill feishu-upload-imagegit clone --depth 1 https://github.com/smallnest/goclawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/smallnest/goclaw/feishu-upload-image)<a href="https://agentmods.dev/skills/smallnest/goclaw/feishu-upload-image"><img src="https://agentmods.dev/badge/skills/smallnest/goclaw/feishu-upload-image/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/smallnest/goclaw/feishu-upload-image"><img src="https://agentmods.dev/badge/skills/smallnest/goclaw/feishu-upload-image.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00021 | $0.00728 |
| Opus 5 | $0.00010 | $0.00364 |
| Sonnet 5 | $0.00004 | $0.00146 |
| Haiku 4.5 | $0.00002 | $0.00073 |
Grade A, and why
feishu-upload-image scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -X POST https://open.feishu.cn/open-apis/im/v1/messages \ How it starts
The opening of the file, as written. The whole thing — 106 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Feishu Upload Image
Upload images to Feishu/Lark and get the image_key for use in messages.
Usage
Upload from Local File
python3 ./scripts/upload_image.py /path/to/image.jpg
Upload via HTTP
python3 ./scripts/upload_image.py --type message --image-type message https://example.com/image.jpg
Upload from Base64
python3 ./scripts/upload_image.py --base64 "iVBORw0KGgoAAAANS..."
Options
| Option | Description | Default |
|---|---|---|
| `--type message | avatar` | Image usage type |
| `--image-type message | avatar` | Same as --type |
Limits
- Max file size: 10MB
- Supported formats: JPEG, PNG, WEBP, GIF, TIFF, BMP, ICO
- GIF resolution ≤ 2000×2000
- Other formats ≤ 12000×12000
Response
Returns image_key which can be used in Feishu messages:
{
"code": 0,
"data": {
"image_key": "img_v2_xxx"
}
}
发送图片消息指南
获取必要信息
- 飞书访问令牌 (tenant_access_token 或 app_access_token)
- 接收者ID (open_id, user_id, chat_id, 或 email)
发送图片消息API
方式1：直接发送图片消息
curl -X POST https://open.feishu.cn/open-apis/im/v1/messages \
-H "Authorization: Bearer {access_token}" \
-H "Content-Type: application/json" \
-d '{
"receive_id": "{chat_id}",
"msg_type": "image",
"content": "{\"image_key\":\"{image_key}\"}"
}'
方式2：在富文本中嵌入图片
curl -X POST https://open.feishu.cn/open-apis/im/v1/messages \
-H "Authorization: Bearer {access_token}" \
-H "Content-Type: application/json" \
-d '{
"receive_id": "{chat_id}",
"msg_type": "post",
"content": "{\"post\":{\"zh_cn\":{\"title\":\"图片消息\",\"content\":[[{\"tag\":\"img\",\"image_key\":\"{image_key}\"}]]}}}"
}'
获取群聊chat_id
- 在飞书中打开群聊，查看URL中的chat_id
- 或者通过API查询群聊列表：
curl -X GET https://open.feishu.cn/open-apis/im/v1/chats \
-H "Authorization: Bearer {access_token}"
实践经验
- 上传图片后获得
image_key，有效期通常为7天 - 使用前需确保有正确的访问令牌权限
- 发送消息需要
im:message:send_as_bot权限 - 建议先上传图片，再发送消息，两步操作分离
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 106 lines · 21 tokens per session scan A cc3fb6a320b2
feishu-upload-image is a skill published in the GitHub repository smallnest/goclaw (602 stars, last pushed 5mo ago), licensed MIT. It adds 21 tokens to every session and 728 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
meeting-note-summarizer
Turn meeting notes or transcripts into factual summaries, decisions, questions, and action items. Use when a user wants a concise recap or needs explicit owners and deadlines extracted without filling in missing details.
daily-standup-journal
Generate concise daily standups, reflection prompts, and weekly retrospectives for individuals or teams. Use for planning a day, surfacing blockers, reviewing user-provided entries, or drafting a check-in without assuming prior history.
dev-workflow
The complete development workflow for SkillHub contributors including local dev, staging validation, testing, and PR creation. Ensures agents follow the correct sequence of steps.
api-and-namespace-design
API design conventions, namespace coordinate system, RBAC roles, ClawHub compatibility layer, OpenAPI contract sync rules, and CSRF/session handling.
backend-module-structure
Rules for the SkillHub backend Maven multi-module clean architecture. Ensures agents place new code in the correct module and respect dependency direction.
retrieval-practice-generator
Generate low-stakes retrieval-practice questions with grounded answer notes and implementation guidance. Use for quiz starters, revision activities, delayed recall, misconception checks, or adapting recall difficulty.