lark-shared

Signing in and permissions for everything else here: who you are acting as — yourself or the app — what you are allowed to touch, and what has to be confirmed before it runs.

WHEN TO USE

SCOPE

USE FOR

Check whether you are currently signed in as yourself or as the app.
Sign in and grant access to one area, such as documents or cloud files.
Fix a command that failed because it lacked the permission it needed.
Revoke a previous authorization to sign out or switch to a different account.
Show a scannable QR code for a login or permission link instead of a bare URL.

This is a saved copy of the skill's SKILL.md instructions. It may differ from the upstream file or the version you install.

In this document (4)

lark-cli 共享规则

所有 lark-* skill 共享的底座：身份、认证、输出契约与高风险操作。

通用准则

调用前先确认用法：执行前读对应 reference 或跑 --help，别猜 flag 盲调。
身份决定你代表谁操作：--as user 代表用户本人（能看到、也能操作其日历、云空间/云盘/云存储等个人资源），--as bot 代表应用自己，应用级操作，只能访问bot自己的资源，bot 查用户资源会返回空成功而非报错。动手前先搞清楚身份identity。身份模型和权限管理 → lark-shared-identity-and-permissions.md。
授权 / 配置类 URL 必须配二维码：当命令输出 verification_url、verification_uri_complete、console_url 等 URL 字段时，必须用 lark-cli auth qrcode 生成并在回复中展示，URL 在前二维码在后；优先生成 PNG（--output），仅当用户明确要求时才使用 ASCII（--ascii）。URL 原样转发——不编解码、不加标点、不重拼 query，二维码和链接请一起展示给用户。
--format json（默认）下，判断成功用 ok == true（或进程退出码 0），不要用 code == 0：成功信封没有顶层 code / msg 字段，code 只出现在错误信封的 error 内。按 OpenAPI 老格式 {"code": 0, "msg": "ok"}判断会把所有成功调用误判为失败——封装写入类命令时尤其危险。JSON 输出契约 → lark-shared-output-contract.md。

安全规则

禁止输出密钥（appSecret、accessToken等）到终端明文。
写入/删除操作前必须确认用户意图。
目标命令支持 --dry-run 时，用 --dry-run 预览危险请求。
退出码 10 是高风险确认门禁（risk: "high-risk-write"），不是错误：停下 → 向用户确认（展示 action、risk 和关键参数）→ 取得用户显式同意后，将 hint 指出的确认 flag 追加到你原始 argv 的末尾后重试；绝不静默加确认 flag 绕过 → lark-shared-high-risk-approval.md。
文件路径只接受相对路径：--file、--output、--output-dir、@file 等路径参数只接受 cwd 下的相对路径，传绝对路径会报 unsafe file path。数据输入（@file、大 JSON）优先用 stdin 传入，避免路径和转义问题。

Reference 强触发索引

命中任一触发条件时，MUST 在执行下一步前读取对应 reference。命中多条时按表中顺序读取，同一reference只读取一次。

强触发条件（命中任一即必读）	Reference
查看自己是谁(user/bot)、获取当前身份详细字段信息、身份诊断、`--as`选择逻辑、身份延续、登录态、认证、scope、授权和权限管理、`missing_scopes` 或 `console_url`、Agent 准备发起或完成 `auth login`	`lark-shared-identity-and-permissions.md`
需要依赖 JSON 输出契约判断成功 / 失败、读取 stdout / stderr，或为命令编写脚本与封装	`lark-shared-output-contract.md`
准备执行high-risk-write(高风险操作)、判断命令风险等级、遇到退出码 exit 10、`confirmation_required`、确认后重试	`lark-shared-high-risk-approval.md`
首次使用CLI需运行 `lark-cli config init` 完成应用配置、或 CLI 明确提示 `config init --new`	`lark-shared-config-init.md`
用户询问 notice、CLI版本更新、或输出含 `_notice`（升级 / skills 落后 / 废弃命令提示）	`lark-shared-update-notice.md`

Account or credentials required

1 FOR YOU

01
Authenticate lark-cli with the domains you need
Run lark-cli auth login --domain <domain> (for example all, docs, or drive) to establish a user or bot identity with the permission scopes your task requires before any other lark-* skill calls the API.

Listed as free: Connected services may require an account or charge fees.

Not standalone. This skill ships with larksuite/cli and only works together with that tool — install the tool first, then add this skill.

Run this outside your AI tool, using Node.js 22.20.0 or newer. Skills CLI 1.7.2 skips skill selection; prompts cancel installation without an interactive terminal. If choosing Project when asked about installation scope, open your project's folder before running this.

Install checklist

Check selected tools if a picker appears; Claude Code may be unchecked under Additional agents. ↑/↓ moves, Space toggles selections, Enter confirms.
Without a tool picker, check Installing to: for your intended tool. Stop if it names a different tool.
If asked, choose Symlink (Recommended) for shared files or Copy to all agents for separate copies; review the summary before confirming installation.
Install the find-skills skill? defaults to Yes, adding another skill for all projects. Choose No if you don't want that extra installation.

Skills CLI 1.7.2 sends install data to skills.sh by default, including the source, skill names, target tools and file details; GitHub sources are reported only when GitHub confirms the repository is public, while other remote sources can also be reported. Confirmed-public GitHub sources also trigger a security-audit request. Before installing, set the environment variable DO_NOT_TRACK=1 or DISABLE_TELEMETRY=1 to disable both.

npx skills add larksuite/cli --skill "lark-shared" --full-depth

After installing for Claude Code, open it in the installation project if you chose Project; Global makes the skill available across projects on this computer. Once Claude Code loads the skill, its description helps Claude decide when to use it.

If installation created a top-level skills folder that did not exist when your Claude Code session started, run /reload-skills in that session. Run it again after later changes in that folder.

What's inside

Files included with this skill.

View on GitHub

lark-cli 共享规则

通用准则

安全规则

Reference 强触发索引

Account or credentials required

What's inside

More skills

lark-approval

lark-apps

lark-attendance

lark-base

lark-calendar

lark-contact