lark-shared

Configure lark-cli authentication, identity switching, and permission scope management for Feishu resources.

Updated Apr 30, 2026
One-click install
npx skills add https://github.com/yuezhen-huang/my-bytedance-skillhub --skill lark-shared-yuezhen-huang
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: lark-shared
Source: https://github.com/yuezhen-huang/my-bytedance-skillhub/tree/main/lark-shared
Command: npx skills add https://github.com/yuezhen-huang/my-bytedance-skillhub --skill lark-shared-yuezhen-huang

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? First-time lark-cli users often get stuck on app configuration, OAuth login, and confusing permission errors when accessing Feishu/Lark resources. This Skill provides the shared foundation for initializing the CLI, choosing the right identity (user vs bot), and resolving permission-denied errors correctly. ## Core Features & Use Cases - App Configuration: Runs lark-cli config init in background mode and extracts the authorization link to send to the user. - Identity Management: Switches between --as user and --as bot identities, explaining why a bot cannot see user calendars, docs, or mailboxes. - Permission Troubleshooting: Parses permission_violations, console_url, and hint fields from errors, then guides scope activation in the developer console or incremental auth login --scope authorization. - Update & Safety Rules: Detects _notice.update version prompts and enforces security rules like never printing appSecret or accessToken. - Use Case: A user asks the agent to check their calendar but hits a permission error; the agent identifies the missing scope, runs lark-cli auth login --scope "calendar:calendar:readonly" in background, and sends the authorization link to the user. ## Quick Start Help me initialize lark-cli configuration and log in with user identity so I can access my Feishu calendar.

Frequently Asked Questions about lark-shared

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up lark-cli for the first time?

Run lark-cli config init --new in background mode to start the app configuration flow. The command blocks until the user opens the generated authorization link and completes setup, so extract the link from the output and send it to the user.

What is the difference between lark-cli user and bot identity?

User identity (--as user) accesses personal resources like calendars and docs after auth login, while bot identity (--as bot) only needs appId and appSecret but cannot see user resources. Choose based on whose data the task targets.

How do I fix permission denied errors in lark-cli?

Check the error's permission_violations field for missing scopes. For bot identity, open the console_url to enable scopes in the developer backend; for user identity, run lark-cli auth login --scope with the missing scope for incremental authorization.

Why does lark-cli return empty calendar data with bot identity?

Bot identity cannot access user resources, so querying a calendar with --as bot returns the bot's own empty calendar. Switch to --as user and complete auth login with the calendar scope to read the user's actual schedule.

Can lark-cli auth login accumulate multiple scopes?

Yes, scopes from multiple auth login calls accumulate as incremental authorization. Each login must specify a range via --domain or --scope, and the granted scopes are merged rather than replaced.