Bundle Pluginstructural

Lark Workflowv1.0.3

15 cross-domain workflow skills for Lark/Feishu CLI — orchestrate calendar, task, docs, approval, IM and more into powerful automated workflows.

lark-workflow·runtime lark-workflow·by @woodfantasy
openclaw bundles install clawhub:lark-workflow
Latest release: v1.0.3Download zip

Capabilities

Bundle format
skills-bundle
Host targets
openclawclaudegemini
Runtime ID
lark-workflow

Compatibility

Built With Open Claw Version
1.0.3
Security Scan
VirusTotalVirusTotal
stale
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The skills explicitly orchestrate lark-cli commands across many Lark domains — requiring lark-cli is appropriate. However, registry-level metadata at the top of the package reported "required binaries: none" while the project files (openclaw.bundle.json and each SKILL.md) declare metadata.requires.bins: ["lark-cli"]. This is an internal metadata inconsistency but not a functional mismatch with the skill's purpose.
Instruction Scope
Each SKILL.md contains detailed, domain-specific step-by-step instructions that stay within the stated scope: running lark-cli commands, consulting lark-shared reference docs, using system date, and requiring user confirmation before writes. The skills reference only Lark/Feishu APIs via lark-cli; they do not instruct reading unrelated system files or sending data to unknown external endpoints.
Install Mechanism
The registry lists no install spec (instruction-only), which minimizes platform-side install risk. README recommends user-run installs via npm/npx (e.g., npm install -g @larksuite/cli; npx skills add woodfantasy/lark-workflow). Those user-run commands can fetch and run code from npm/GitHub, so users should verify the upstream package/repository before running them. The bundle itself contains only Markdown and docs (no executable scripts in the provided files).
Credentials
The skills request no environment variables or secrets from the platform. They rely on lark-cli's OAuth flow (lark-cli auth login --domain ...) and documented OAuth scopes for each workflow, which is proportional to their cross-domain automation purpose. The SKILL.md also documents least-privilege alternatives and per-skill scope lists.
Persistence & Privilege
The bundle does not request permanent platform presence (always:false) and is instruction-only. It does not modify other skills' configuration or request elevated system privileges. Write operations to Lark are gated by explicit user confirmation in the documentation.
Assessment
This bundle appears to be what it claims: a set of Lark/Feishu CLI workflow definitions expressed as SKILL.md files. Before installing or running any recommended npx/npm commands: 1) verify the upstream repository/package (the package.json points to https://github.com/woodfantasy/lark-workflow) and review the source there; 2) avoid running broad "--recommend" auth unless you trust the environment—grant only the per-skill scopes you need; 3) be aware that the README suggests using npx to install packages, which will execute code downloaded from the network—inspect that code before running if possible; 4) rely on the documented user-confirmation gates for write operations, and do not skip those; and 5) note the registry metadata mismatch about required binaries (registry lists none while the bundle expects lark-cli) — the practical requirement is lark-cli, which is appropriate for these workflows.

Verification

Tier
structural
Scope
artifact only
Summary
Validated package structure and extracted metadata.
Scan status
clean

Tags

latest
1.0.3

中文版 | English

lark-workflow

15 cross-domain workflow skills for Lark/Feishu CLI — orchestrate multiple business domains into powerful automated workflows.

While lark-cli provides 18 atomic skills for individual domains (Calendar, IM, Docs, Tasks, etc.), lark-workflow combines them into multi-step, cross-domain workflows that solve real-world productivity scenarios.

Quick Start

1. Install

Option A: via npx (GitHub source)

# Install lark-cli (if not already installed)
npm install -g @larksuite/cli

# Install official lark-cli skills (required dependency)
npx skills add larksuite/cli -y -g

# Install lark-workflow skills
npx skills add woodfantasy/lark-workflow -y -g

Option B: via OpenClaw (ClawHub)

openclaw install lark-workflow

2. Authenticate

# Recommended: authorize all commonly used domains at once
lark-cli auth login --recommend

3. Use

Simply tell your AI Agent what you need in natural language:

💬 "Give me today's briefing"           → daily-briefing
💬 "Write my weekly report"             → weekly-report
💬 "Extract action items from meeting"  → action-extractor
💬 "Summarize this document"            → doc-summarizer
💬 "What does the wiki say about X?"    → knowledge-qa
💬 "Prioritize my tasks for today"      → task-prioritizer
💬 "Schedule a meeting with X and Y"    → smart-scheduler
💬 "Where's my approval at?"            → approval-accelerator
💬 "Analyze this Bitable"               → base-analytics
💬 "New hire X is joining"              → onboarding
💬 "Generate docs from template"        → doc-template-engine
💬 "How efficient are my meetings?"     → meeting-efficiency
💬 "Who has bandwidth on the team?"     → workload-balancer
💬 "Audit the wiki for stale docs"      → wiki-auditor
💬 "Optimize my calendar"               → calendar-optimizer

The AI Agent reads the corresponding SKILL.md, understands the workflow, and executes the right lark-cli commands automatically.

Skills

🔄 Personal Productivity

SkillDescriptionDomains
daily-briefingPanoramic daily briefing across 5 domainsCalendar, Task, Mail, Approval, IM
weekly-reportAutomated weekly report from tasks, meetings, and docsCalendar, Task, Drive, VC, Docs
task-prioritizerEisenhower matrix + time-block suggestionsTask, Calendar
calendar-optimizerConflict diagnosis and schedule optimizationCalendar

🤝 Team Collaboration

SkillDescriptionDomains
smart-schedulerMulti-attendee free slot finder + room booking + event creationCalendar, Contact
action-extractorMeeting → notes → tasks → notifications closed loopVC, Minutes, Docs, Contact, Task, IM
onboardingNew hire automation across 5 domainsContact, IM, Task, Wiki, Calendar
workload-balancerTeam workload heatmap + assignment suggestionsTask, Calendar, Contact
approval-acceleratorApproval tracking + timeout nudge messagingApproval, IM, Contact

📊 Data & Analytics

SkillDescriptionDomains
base-analyticsBitable trend analysis, anomaly detection, insightsBase
meeting-efficiencyMeeting time cost, note coverage, pattern analysisVC, Calendar, Minutes
doc-template-engineData-driven batch document generationDocs, Base, Sheets

📚 Knowledge Management

SkillDescriptionDomains
doc-summarizerStructured document/wiki summariesDocs, Wiki, Drive
knowledge-qaRAG-style Q&A with source citationsWiki, Docs, Drive
wiki-auditorKnowledge base health scoring + stale doc detectionWiki, Drive

How It Works

These skills are SKILL.md-based workflow definitions. Each SKILL.md file teaches an AI Agent how to orchestrate multiple lark-cli commands in a structured, step-by-step manner.

┌─────────────────────────────────────────────────────────────────────┐
│                          AI Agent                                    │
│     You say: "Give me today's briefing"                             │
│     Agent reads: daily-briefing/SKILL.md                            │
│     Agent executes: calendar → task → mail → approval → AI summary  │
└──────────┬──────────────────────────────────────────────────────────┘
           │
           ▼
┌─────────────────────────────────────────────────────────────────────┐
│                    lark-workflow Skills (15)                          │
│                                                                      │
│  Personal          Team             Analytics       Knowledge        │
│  ┌────────────┐  ┌──────────────┐  ┌────────────┐  ┌────────────┐  │
│  │briefing    │  │scheduler     │  │base-analyt.│  │doc-summary │  │
│  │weekly-rpt  │  │action-extr.  │  │meeting-eff.│  │knowledge-qa│  │
│  │task-prior. │  │onboarding    │  │doc-template│  │wiki-auditor│  │
│  │cal-optimiz.│  │workload-bal. │  └────────────┘  └────────────┘  │
│  └────────────┘  │approval-acc. │                                    │
│                  └──────────────┘                                    │
└──────────┬──────────────────────────────────────────────────────────┘
           │
           ▼
┌─────────────────────────────────────────────────────────────────────┐
│                  lark-cli Atomic Skills (18)                          │
│  calendar · task · mail · approval · im · vc · docs · drive         │
│  contact · minutes · base · sheets · wiki · event · whiteboard      │
└─────────────────────────────────────────────────────────────────────┘

What makes a SKILL.md?

Each skill follows the lark-skill-maker standard:

  • YAML frontmatter — name, version, description, dependencies
  • Trigger phrases — natural language patterns that activate the skill
  • Workflow steps — Step 1 → 2 → 3... with exact CLI commands
  • Output template — structured Markdown format for consistent results
  • Permission table — required OAuth scopes per command
  • Error handling — graceful degradation when a domain is unavailable

Authentication Reference

Each skill lists required scopes in its SKILL.md. Here's a quick reference:

SkillAuth Command
daily-briefinglark-cli auth login --domain calendar,task,mail,approval,im
weekly-reportlark-cli auth login --domain calendar,task,drive,vc,doc
action-extractorlark-cli auth login --domain vc,drive,contact,task,im
doc-summarizerlark-cli auth login --domain doc,drive,wiki
knowledge-qalark-cli auth login --domain wiki,doc,drive
task-prioritizerlark-cli auth login --domain task,calendar
smart-schedulerlark-cli auth login --domain calendar,contact
approval-acceleratorlark-cli auth login --domain approval,im,contact
base-analyticslark-cli auth login --domain base,doc
onboardinglark-cli auth login --domain contact,im,task,wiki,calendar
doc-template-enginelark-cli auth login --domain doc,base,drive
meeting-efficiencylark-cli auth login --domain vc,calendar
workload-balancerlark-cli auth login --domain task,calendar,contact
wiki-auditorlark-cli auth login --domain wiki,drive
calendar-optimizerlark-cli auth login --domain calendar

Tip: Use lark-cli auth login --recommend to authorize the most commonly used scopes in one step.

Least-privilege alternative: If you only use a subset of skills, authorize only the domains you need — each row above shows the minimum scopes for that skill.

Security & Privacy

  • No secrets stored — lark-workflow is instruction-only (SKILL.md files). It never reads, stores, or transmits credentials. Authentication is handled entirely by lark-cli auth, which stores tokens in the system keychain.
  • No code execution — Installation adds only Markdown skill files. No scripts, binaries, or background processes are installed.
  • User confirmation required — All write operations (create events, send messages, create tasks, etc.) require explicit user confirmation before execution.
  • Scope transparency — Each skill declares its required OAuth scopes in a permission table. Use per-skill --domain auth to grant only the minimum permissions needed.
  • Graceful degradation — Optional domains that fail or are unauthorized are skipped with a notice, never blocking the main workflow.

Contributing

We welcome contributions! See CONTRIBUTING.md for guidelines.

License

This project is licensed under the MIT License — see LICENSE for details.

This software calls Lark/Feishu Open Platform APIs at runtime. Use of these APIs is subject to the Lark Terms of Service and Privacy Policy.