CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

feishu

Work with Feishu or Lark bots, docs, sheets, bitables, approval flows, and OpenAPI/MCP setup without hardcoding credentials.

Quality

74%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./crates/tui/assets/skills/feishu/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

71%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The body is a lean, well-structured instruction-only skill with concrete env vars, endpoints, and MCP CLI commands, plus explicit validation and confirmation checkpoints. Its main weakness is that the core API flows (token acquisition, webhook sends) are named but not shown with executable examples or error-recovery steps.

Suggestions

Add a short executable example for the most common flow, e.g., a curl snippet obtaining a tenant_access_token from https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal using the env vars, and a minimal signed webhook POST.

Add an error-recovery feedback loop after the verification step (e.g., 'If the dry run or read-back fails, fix the payload and re-verify before sending').

Remove or fold the 'Common Use Cases' section into the Workflow/description to trim redundant tokens.

DimensionReasoningScore

Conciseness

The body is lean with no concept over-explanations — it jumps straight to endpoints ('open.feishu.cn' vs 'open.larksuite.com'), env var names, and CLI commands, assuming Claude's competence. It is not 5 because the 'Common Use Cases' bullet list largely duplicates what the description and Workflow sections already convey and could be trimmed.

4 / 5

Actionability

Concrete, executable specifics are present: exact env vars (FEISHU_APP_ID, FEISHU_APP_SECRET, FEISHU_WEBHOOK_URL), exact CLI commands ('codewhale mcp add', 'codewhale mcp validate', 'codewhale mcp tools'), and named MCP tools. It is not 5 because the core API operations (obtaining a tenant access token, sending a signed webhook message) have no example request or payload, leaving minor gaps in executable coverage.

4 / 5

Workflow Clarity

The 6-step workflow is clearly sequenced and includes explicit checkpoints: 'Verify with a dry run, sandbox document, or read-back call before sending externally visible messages', 'codewhale mcp validate', and the confirmation gate before external writes. It is not 5 because there is no error-recovery feedback loop (what to do when validation fails), and the verification step itself is a direction rather than a concrete check.

4 / 5

Progressive Disclosure

The skill is under 50 lines with well-organized sections (Ground Rules, Common Use Cases, Workflow), no inlined bulk that belongs in separate files, and no external references required. Per the rubric's simple-skill guideline, this earns a 5 with just well-organized sections.

5 / 5

Total

17

/

20

Passed

Description

65%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

The description identifies a distinct, well-scoped niche (Feishu/Lark integration) with good natural trigger terms, but it lacks a 'Use when...' trigger clause and relies on a single generic action verb, limiting completeness and specificity.

Suggestions

Add an explicit trigger clause, e.g., 'Use when the user mentions Feishu, Lark, 飞书, or asks to send bot messages, read/write docs or sheets, or configure Feishu/Lark MCP servers.'

Replace the generic 'Work with' with concrete actions: 'Send bot webhook messages, obtain tenant access tokens, read and write docs/sheets/bitables, update approval flows, and configure OpenAPI/MCP integrations.'

Include the '飞书' synonym in the description itself, since users of the China product commonly refer to it by its Chinese name.

DimensionReasoningScore

Specificity

The description names the domain and a broad set of concrete objects ("bots, docs, sheets, bitables, approval flows, and OpenAPI/MCP setup"), but the only action verb is the generic "Work with" — no distinct concrete actions (send, read, write, configure) are stated, matching anchor 3's level of action specificity. It is not 4 because anchor 4 requires several specific actions (e.g., 'Extracts text, fills forms, converts pages'), not one generic verb applied to specific nouns.

3 / 5

Trigger Term Quality

Natural terms users would say are present: "Feishu", "Lark", "bots", "sheets", "bitables", "approval flows", "OpenAPI", "MCP" — good coverage matching anchor 4. It is not 5 because common variations are missing, notably the Chinese name "飞书" (which the skill body itself lists as a trigger) and terms like messaging/chat.

4 / 5

Total

7

/

10

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository

Hmbown/Codewhale

Path

crates/tui/assets/skills/feishu/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.