Install
$ agentstack add skill-larksuite-cli-lark-im ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
im (v1)
CRITICAL — 开始前 MUST 先用 Read 工具读取 [../lark-shared/SKILL.md](../lark-shared/SKILL.md),其中包含认证、权限处理
Core Concepts
- Message: A single message in a chat, identified by
message_id(omxxx). Supports types: text, post, image, file, audio, video, sticker, interactive (card), sharechat, shareuser, mergeforward, etc. - Chat: A group chat or P2P conversation, identified by
chat_id(oc_xxx). - Thread: A reply thread under a message, identified by
thread_id(omxxx or omtxxx). - Reaction: An emoji reaction on a message.
- Flag: A bookmark on a message or thread.
- Feed Shortcut: A chat pinned to the current user's feed sidebar, identified by
feed_card_id(anoc_xxxopenchatid for CHAT type). - Feed Group: A tag that groups feed cards in the feed list, identified by
feed_group_id(ofg_xxx). Members are feed cards, each identified byfeed_id+feed_type. Two types:normal(members managed explicitly) andrule(members auto-derived from rules).
Resource Relationships
Chat (oc_xxx)
├── Message (om_xxx)
│ ├── Thread (reply thread)
│ ├── Reaction (emoji)
│ └── Resource (image / file / video / audio)
└── Member (user / bot)
Important Notes
Identity and Token Mapping
--as usermeans user identity and usesuser_access_token. Calls run as the authorized end user, so permissions depend on both the app scopes and that user's own access to the target chat/message/resource.--as botmeans bot identity and usestenant_access_token. Calls run as the app bot, so behavior depends on the bot's membership, app visibility, availability range, and bot-specific scopes.- If an IM API says it supports both
userandbot, the token type changes who the operator is. The same API can succeed with one identity and fail with the other because owner/admin status, chat membership, tenant boundary, or app availability are checked against the current caller.
Sender Name Resolution with Bot Identity
When using bot identity (--as bot) to fetch messages (e.g. +chat-messages-list, +threads-messages-list, +messages-mget), sender names may not be resolved (shown as open_id instead of display name). This happens when the bot cannot access the user's contact info.
Root cause: The bot's app visibility settings do not include the message sender, so the contact API returns no name.
Solution: Check the app's visibility settings in the Lark Developer Console — ensure the app's visible range covers the users whose names need to be resolved. Alternatively, use --as user to fetch messages with user identity, which typically has broader contact access.
Default message enrichment (reactions / update_time)
The four message-pulling shortcuts (+messages-mget, +chat-messages-list, +messages-search, +threads-messages-list) automatically attach a reactions block and (for edited messages) update_time to each returned message — no separate im.reactions.batch_query call is needed. Pass --no-reactions to opt out. For the full contract (output shape, the im:message.reactions:read scope requirement, and the "missing field ≠ fetch failure" data rules), read [references/lark-im-message-enrichment.md](references/lark-im-message-enrichment.md).
Opt-in resource auto-download (--download-resources)
+chat-messages-list, +messages-mget, and +threads-messages-list accept --download-resources (off by default — no resources block and no extra requests when omitted). When set, eligible message resources (image/file/audio/video/media + post-embedded; stickers excluded) are downloaded into ./lark-im-resources/ and each message gains a resources array of {message_id, key, type, local_path, size_bytes}. Downloads are deduped by (message_id, file_key), run with bounded concurrency, and isolate single-resource failures (error: true + stderr warning). Scope: requires im:message:readonly (already declared by the listing commands — no extra scope); works under both user and bot identity. For one-off downloads use [+messages-resources-download](references/lark-im-messages-resources-download.md). Full contract: [references/lark-im-message-enrichment.md](references/lark-im-message-enrichment.md).
Card Messages (Interactive)
Card messages (interactive type) are not yet supported for compact conversion in event subscriptions. The raw event data will be returned instead, with a hint printed to stderr.
interactive cards support callback events (card.action.trigger) — see [references/lark-im-card-action-reply.md](references/lark-im-card-action-reply.md).
Audio Messages
--audio sends a voice message and supports only Opus audio files, for example .opus files or Ogg Opus (.ogg) files. For mp3, wav, or other non-Opus audio, either convert to .opus first and keep using --audio, or send the original file as an attachment with --file.
Sending Doc Content as a Message
When sending content fetched from a Lark doc as a message, fetch the doc with --doc-format im-markdown, then send it as a message using the --markdown format. The fetched content is already in markdown; in any content-forwarding scenario, keep the fetched original text and send it in the --markdown format. Note: if the doc contains a cite tag with type="user", keep it as-is and do not strip the tag.
Flag Types
Flags support two layers:
- Message-layer flag:
(ItemTypeDefault, FlagTypeMessage)— regular message bookmark - Feed-layer flag:
(ItemTypeThread/ItemTypeMsgThread, FlagTypeFeed)— thread as feed-layer bookmark
Item types for feed-layer flags:
- ItemTypeThread (4) = thread in a topic-style chat
- ItemTypeMsgThread (11) = thread in a regular chat
Feed Shortcut
Feed shortcuts add chats to the current user's feed sidebar. They are distinct from flags:
- Flag = bookmark on a message/thread, scoped to the user's bookmark list.
- Feed shortcut = entry in the user's feed sidebar (currently only chats).
Key limits:
- Only CHAT-type (
feed_card_idisoc_xxx) is exposed via OpenAPI; doc/app/subscription shortcuts exist internally but are not yet whitelisted. - All three operations (create/remove/list) are user-identity only — they sign with
user_access_token. - Batch size is 10 per call for create/remove; list is a one-page wrapper with opaque
page_tokenpagination.
Shortcuts(推荐优先使用)
Shortcut 是对常用操作的高级封装(lark-cli im + [flags])。有 Shortcut 的操作优先使用。
| Shortcut | 说明 | |----------|------| | [+chat-create](references/lark-im-chat-create.md) | Create a group chat or topic chat; user/bot; --chat-mode group|topic; private/public; invites users/bots; optionally sets bot manager | | [+chat-list](references/lark-im-chat-list.md) | List chats the current user/bot is a member of; defaults to groups; pass --types=p2p,group to include p2p single chats (user-only); user/bot; supports sorting, pagination, --exclude-muted (user-only) | | [+chat-messages-list](references/lark-im-chat-messages-list.md) | List messages in a chat or P2P conversation; user/bot; accepts --chat-id or --user-id, resolves P2P chatid, supports time range/sort/pagination | | [+chat-search](references/lark-im-chat-search.md) | Search visible group chats by --query keyword and/or --member-ids; user/bot; e.g. look up chatid by group name; supports type filters, sorting, pagination, and --exclude-muted (user identity only) | | [+chat-update](references/lark-im-chat-update.md) | Update group chat name or description; user/bot; updates a chat's name or description | | [+messages-mget](references/lark-im-messages-mget.md) | Batch get messages by IDs; user/bot; fetches up to 50 om message IDs, formats sender names, expands thread replies | | [+messages-reply](references/lark-im-messages-reply.md) | Reply to a message (supports thread replies); user/bot; supports text/markdown/post/media replies, reply-in-thread, idempotency key | | [+messages-resources-download](references/lark-im-messages-resources-download.md) | Download images/files from a message; user/bot; supports automatic chunked download for large files (8MB chunks), auto-detects file extension from Content-Type | | [+messages-search](references/lark-im-messages-search.md) | Search messages across chats (supports keyword, sender, time range filters) with user identity; user-only; filters by chat/sender/attachment/time, supports auto-pagination via --page-all / --page-limit, enriches results via batched mget and chats batchquery | | [+messages-send](references/lark-im-messages-send.md) | Send a message to a chat or direct message; user/bot; sends to chat-id or user-id with text/markdown/post/media, supports idempotency key | | [+threads-messages-list](references/lark-im-threads-messages-list.md) | List messages in a thread; user/bot; accepts om/omt input, resolves message IDs to threadid, supports sort/pagination | | [+flag-create](references/lark-im-flag-create.md) | Create a bookmark on a message; user-only; defaults to message-layer flag; use --flag-type feed for feed-layer flag (itemtype auto-detected from chat mode) | | [+flag-cancel](references/lark-im-flag-cancel.md) | Cancel (remove) a bookmark. When no --flag-type is given, best-effort double-cancel: removes message layer and (when chattype is determinable) feed layer | | [+flag-list](references/lark-im-flag-list.md) | List bookmarks; user-only; auto-enriches feed-type thread entries with message content; supports --page-all auto-pagination | | [+feed-shortcut-create](references/lark-im-feed-shortcut-create.md) | Add chats to the user's feed shortcuts; user-only; ocxxx chat IDs only; batch up to 10 per call; --head/--tail controls insertion order; partial failures return an ok:false ledger | | [+feed-shortcut-remove](references/lark-im-feed-shortcut-remove.md) | Remove chats from the user's feed shortcuts; user-only; batch up to 10 per call; removing an absent shortcut is idempotent success; real per-item failures return an ok:false ledger | | [+feed-shortcut-list](references/lark-im-feed-shortcut-list.md) | List one page of the user's feed shortcuts; user-only; omit --page-token for the first page; default output enriches CHAT entries under detail; pass --no-detail to skip the extra lookup and im:chat:read scope | | [+feed-group-list](references/lark-im-feed-group-list.md) | List the caller's feed groups (tags); user-only; supports --page-all auto-pagination | | [+feed-group-list-item](references/lark-im-feed-group-list-item.md) | List feed cards in a feed group (tag); user-only; enriches each item with chatname resolved from feedid; supports --page-all auto-pagination | | [+feed-group-query-item](references/lark-im-feed-group-query-item.md) | Look up specific feed cards in a feed group (tag) by ID; user-only; enriches each item with chatname resolved from feedid |
API Resources
lark-cli schema im.. # 调用 API 前必须先查看参数结构
lark-cli im [flags] # 调用 API
> 重要:使用原生 API 时,必须先运行 schema 查看 --data / --params 参数结构,不要猜测字段格式。
chats
create— 创建群。Identity:botonly (tenant_access_token).get— 获取群信息。Identity: supportsuserandbot; the caller must be in the target chat to get full details, and must belong to the same tenant for internal chats.link— 获取群分享链接。Identity: supportsuserandbot; the caller must be in the target chat, must be an owner or admin when chat sharing is restricted to owners/admins, and must belong to the same tenant for internal chats.update— 更新群信息。Identity: supportsuserandbot.
chat.members
bots— 获取群内机器人列表。Identity: supportsuserandbot; the caller must be in the target chat and must belong to the same tenant for internal chats.create— 将用户或机器人拉入群聊。Identity: supportsuserandbot; the caller must be in the target chat; forbotcalls, added users must be within the app's availability; for internal chats the operator must belong to the same tenant; if only owners/admins can add members, the caller must be an owner/admin, or a chat-creator bot withim:chat:operate_as_owner.delete— 将用户或机器人移出群聊。Identity: supportsuserandbot; only group owner, admin, or creator bot can remove others; max 50 users or 5 bots per request.get— 获取群成员列表。Identity: supportsuserandbot; the caller must be in the target chat and must belong to the same tenant for internal chats.
chat.user_setting
batch_query— 批量查询当前用户在群内的个人偏好设置 (e.g.is_mutedmutes normal messages,is_mute_at_allmutes @all messages); up to 10 chats per request. Identity:useronly (user_access_token); the caller must be in each target chat.batch_update— 批量更新当前用户在群内的个人偏好设置 (e.g.is_mutedmutes normal messages,is_mute_at_allmutes @all messages); up to 10 chats per request. Identity:useronly (user_access_token); the caller must be in each target chat.
chat.nickname
get— 获取自己的群昵称。Get your own nickname in the chat (self-only). Identity:useronly (user_access_token); returns an empty string when no nickname is set.update— 设置自己的群昵称。Set or update your own nickname in the chat (self-only). Identity:useronly (user_access_token);nicknamemust be a non-empty string (max 300 bytes). Use DELETE to clear it.delete— 清空自己的群昵称。Clear your own nickname in the chat (self-only). Identity:useronly (user_access_token).
chat.managers
add_managers— 指定群管理员。Identity: supportsuserandbot; only the group owner can add managers; max 10 managers per chat (20 for super-large chats), and at most 5 bots per request.delete_managers— 删除群管理员。Identity: supportsuserandbot; only the group owner can remove managers; max 50 users or 5 bots per request.
chat.moderation
get— 获取群成员发言权限。Identity: supportsuserandbot; the caller must be in the target chat and belong to the same tenant.update— 更新群发言权限。Identity: supportsuserandbot; only the group owner (or creator bot withim:chat:operate_as_owner) can update; the caller must be in the chat.
messages
delete— 撤回消息。Identity: supportsuserandbot; forbotcalls, the bot must be in the chat to revoke group messages; to revoke another user's group message, the bot must be the owner, an admin, or the creator; for user P2P recalls, the target user must be within the bot's availability.forward— 转发消息。Identity: supportsuserandbot.merge_forward— 合并转发消息。Identity:botonly (tenant_access_token).read_users— 查询消息已读信息。Identity:botonly (tenant_access_token); the bot must be in the chat, and can only query read status for messages it sent within the last 7 days.urgent_app— 发送应用内加急。Identity:botonly (tenant_access_token); the bot must be the message sender and must be in the conversation that contains the message.urgent_phone— 发送电话加急。Identity:botonly (tenant_access_token); the bot must be the message sender and must be in the conversation that contains the message.urgent_sms— 发送短信加急。Identity:botonly (tenant_access_token); the bot must be the message sender and must be in the conversation that contains the message.
reactions
batch_query— 批量获取消息表情。Identity: supportsuserandbot.[Must-read](references/lark-im-reactions.md)create— 添加消息表情回复。Identity: supportsuserandbot; the caller must be in the conversation that contains the message.[Must-read](references/lark-im-reactions.md)delete— 删除消息表情回复。Identity: supportsuserandbot; the caller must be in the conversation that contains the message, and can only delete reactions added by itself.[Must-read](references/lark-im-reactions.md)list— 获取消息表情回复。Identity: supportsuserandbot; the caller must be in the conversation that contains the message.[Must-r
…
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: larksuite
- Source: larksuite/cli
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.