Feishu MarkdownSAFE
从 Markdown 创建飞书文档
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://github.com/huandu/feishu-markdown/actions/workflows/publish.yml) [](https://github.com/huandu/feishu-markdown/blob/main/LICENSE)
本项目是一个单仓库(monorepo),用于将 Markdown 转换为飞书 / Lark 文档格式,并提供一个 MCP 服务以便与 Model Context Protocol 集成。
主要 package:
feishu-markdown:核心库,将 Markdown 转换为飞书文档结构,支持图片、流程图(Mermaid)等处理。feishu-markdown-mcp:基于feishu-markdown的 MCP 服务,可作为模型上下文协议(Model Context Protocol)的后端插件使用。
快速开始
- 安装依赖:
pnpm install
- 构建所有包:
pnpm build
- 在开发中运行某个包(示例):
pnpm --filter feishu-markdown dev
开发
- 运行全部测试:
pnpm test - 代码风格与类型检查:
pnpm lint/pnpm typecheck
发布
仓库提供了 GitHub Actions 工作流用于自动发布。发布到 npm 公共仓库需要在仓库 Secrets 中配置 NPM_TOKEN(用于 pnpm publish)。
许可证
本项目使用 MIT 许可证,详见项目根目录的 LICENSE 文件。
更多信息请查看各子包的 package.json 与 README.md。
cb92678e3737OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add feishu-markdown-mcp -- npx -y [email protected]
Exposed tools (4)
0 read · 4 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
set_config | write | |
update_feishu_document | write | |
upload_markdown_file | write | |
upload_markdown_text | write |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (4 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (4)
../../mcp-publisher publish
eslint, prettier, typescript
@mermaid-js/mermaid-cli, @modelcontextprotocol/sdk, dotenv, zod, @eslint/js, @trivago/prettier-plugin-sort-imports, @types/node, eslint
@mermaid-js/mermaid-cli, axios, form-data, mdast-util-from-markdown, mdast-util-gfm, micromark-extension-gfm, nanoid, @eslint/js
Gates applied: no_behavioural_pass.
cb92678e3737full audit observations/trust-audit/mcp-server/huandu__feishu-markdown.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | cb92678e3737 | SAFE | B | 89 | first audit |
Questions
What is the Feishu Markdown MCP server?
从 Markdown 创建飞书文档
What tools does Feishu Markdown expose?
4 in total: 0 read-only, 4 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Feishu Markdown safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Feishu Markdown need?
It reads FEISHU_APP_SECRET from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Feishu Markdown run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as feishu-markdown at 0.0.1.
How current is this page?
The grade is for one exact copy of the source (cb92678e3737), read on 2026-10-08. The repository is watched and re-audited when it changes.