agency-feishu-integration-developer

Integrate Feishu Open Platform bots, approvals, Bitable sync, and SSO.

Updated Feb 11, 2026
One-click install
npx skills add https://github.com/augustoheiss/LogicDefense --skill agency-feishu-integration-developer-augustoheiss
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: agency-feishu-integration-developer
Source: https://github.com/augustoheiss/LogicDefense/tree/main/.gemini/skills/agency-feishu-integration-developer
Command: npx skills add https://github.com/augustoheiss/LogicDefense --skill agency-feishu-integration-developer-augustoheiss

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams and engineers implement robust, production-grade integrations with the Feishu (Lark) Open Platform to automate approvals, notifications, data sync, and single-sign-on while avoiding common pitfalls like token mismanagement, event replay bugs, and card rendering failures.

Core Features & Use Cases

  • Bots & Messaging: Build webhook or app bots that send text, rich text, files, images, and interactive message cards with callback handling and graceful degradation.
  • Approval Workflows: Define approval flows, submit and query instances, and drive downstream automation on approval events with idempotent callbacks.
  • Bitable & Data Sync: Perform CRUD on Bitable tables, manage views and fields, and implement reliable bidirectional synchronization with batching and throttling.
  • SSO & Mini Programs: Support OAuth/OIDC flows, Feishu QR login integration, and mini program JSAPI usage with container-specific considerations.
  • Operational Hardening: Token caching, event signature/encryption verification, retry logic for rate limits, local validation of message cards, and least-privilege permission planning.

Quick Start

Create a Feishu integration that verifies event subscriptions, securely caches tenant_access_token, and sends an interactive approval card when an approval instance changes state.

Frequently Asked Questions about agency-feishu-integration-developer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a Feishu bot that sends interactive message cards and handles callbacks?

To build a Feishu bot with interactive message cards, you implement webhook or app bots that send rich content and handle card interaction callbacks with graceful degradation. This includes local validation of message cards before rendering.

How does Feishu event subscription verification work for webhook integrations?

Feishu event subscription verification works by validating event signatures and decrypting encrypted payloads. Production integrations must implement this cryptographic verification alongside retry logic for rate limits to prevent event replay bugs.

What's the best way to automate Feishu approval workflows with downstream tasks?

The best way to automate Feishu approval workflows is to define approval flows, submit and query instances, and drive downstream automation on approval events. Implementing idempotent callbacks ensures tasks execute reliably without duplicate processing.

Can I synchronize external data with Feishu Bitable bidirectionally?

Yes, you can synchronize external data with Feishu Bitable bidirectionally by performing CRUD operations on tables, managing views and fields, and implementing reliable synchronization with batching and throttling to handle rate limits.

Do I need OAuth or OIDC to implement Feishu SSO for enterprise applications?

Yes, you need OAuth or OIDC flows to implement Feishu SSO for enterprise applications. This involves secure OAuth/OIDC login flows, Feishu QR login integration, and least-privilege permission governance for internal or ISV apps.

Why does my Feishu integration keep failing with token mismanagement errors?

Feishu integration token mismanagement errors occur when tenant_access_token is not securely cached and refreshed. Production-grade integrations require robust token caching and retry logic for rate limits to maintain stable API authentication.