feishu_file_fetch

What This Skill Does

The feishu_file_fetch skill is a specialized utility designed for the OpenClaw ecosystem to automate the secure retrieval of documents, media, and other assets hosted on Feishu (Lark) servers. By integrating directly with the Feishu IM v1 API, the tool enables agents to fetch files using specific message_id and file_key identifiers. The implementation is architected with a primary focus on security and reliability: it handles token authentication (caching and automatic refreshing of the tenant_access_token), streams data directly to disk to maintain a low memory footprint, and enforces strict size constraints (default 100MB) to prevent system resource exhaustion. The skill includes robust path traversal protection, ensuring that downloaded files are always isolated within a designated, secure output directory, and it verifies file integrity post-download via SHA256 checksums.

Installation

To integrate this skill into your OpenClaw environment, use the following terminal command: clawhub install openclaw/skills/skills/dingshuxin353/feishu-file-fetch

Ensure that you have your environment variables FEISHU_APP_ID and FEISHU_APP_SECRET correctly configured in your agent workspace, as these are required to authorize the API requests. The script is designed to run using only standard Python libraries, eliminating the need for complex dependency management or environment configurations.

Use Cases

This skill is ideal for workflows involving automated document processing, such as fetching team meeting notes, logs, or attachments sent via Feishu. It is particularly useful for developers building automated CI/CD pipelines where artifacts are shared in chat, or for data analysts who need to ingest raw data files directly from Feishu into a local sandbox for processing. By automating the download process, it removes the manual overhead of authentication and browser-based file exporting.

Example Prompts

1. "Download the latest project requirement document sent by the manager in the team channel. The message ID is om_123456 and the file key is file_abc789."
2. "Update my file fetch tool configuration to strictly enforce a 50MB limit and output the result to my local /data/downloads folder."
3. "Fetch the asset with key file_xyz999 from Feishu message om_987654 and confirm the sha256 hash for verification."

Tips & Limitations

• Security: The script utilizes atomic os.replace operations, ensuring that files are only made available once the download and checksum verification are successfully completed.
• Efficiency: The tool uses streaming headers to check Content-Length before initiating the download, preventing unnecessary network traffic and protecting your disk space.
• Limitations: This tool is strictly for Feishu IM resources. It does not support broader document management systems (like Feishu Docs/Wiki) unless accessed through the message resources API. Always ensure your disk has sufficient temporary space before running, as the script creates a temporary file before finalization.