The raw API channel can bypass the scope of registered commands
Source references: 4When existing Skills or registered APIs are insufficient, this Skill explicitly falls back to raw `lark-cli api` calls and permits POST, PUT, and DELETE. It requires intent confirmation for writes and deletions, but a dry run is only recommended when supported, and this file does not require the resolved tenant, identity, object, or full change scope to be shown during confirmation.
A confirmed request can still modify announcements, add members, or delete other cloud resources if the path, parameters, signed-in identity, or target is misunderstood. Changes occur in the user's Feishu/Lark account and may persistently affect members, chats, or other accessible resources.
The skill explicitly falls back to the generic `lark-cli api` interface when existing wrappers are insufficient, including POST, PUT, and DELETE operations that can alter Lark data. This does not show a bypass of Lark authorization scopes, but it does bypass the narrower operation boundary of registered commands. If the agent misidentifies the user's intent, identity, or target, groups, memberships, or other data allowed by the current credentials could be changed. Confirmation and impact disclosure are required, but dry-run is only recommended and the file does not require showing the tenant, acting identity, and exact target. Users can ask the author to add those details and restrict methods or scopes available to the generic API command.
当用户的需求**无法被现有 skill 或 CLI 已注册 API 覆盖**时，使用本技能从飞书官方 markdown 文档库中逐层挖掘原生 OpenAPI 接口，然后通过 `lark-cli api` 裸调完成任务。Show 3 other places
# POST 请求lark-cli api POST /open-apis/<path> --data '{"key":"value"}'# PUT 请求lark-cli api PUT /open-apis/<path> --data '{"key":"value"}'# DELETE 请求lark-cli api DELETE /open-apis/<path>```- **写入/删除类 API**（POST/PUT/DELETE）调用前必须确认用户意图- 建议先用 `--dry-run` 预览请求（如支持）- 不要猜测 API 路径或参数——必须从文档中获取确认- 涉及敏感操作（删除群、移除成员等）时，向用户说明影响范围使用 `lark-cli api` 裸调：```bash# GET 请求lark-cli api GET /open-apis/<path> --params '{"key":"value"}'# POST 请求lark-cli api POST /open-apis/<path> --data '{"key":"value"}'# PUT 请求lark-cli api PUT /open-apis/<path> --data '{"key":"value"}'# DELETE 请求lark-cli api DELETE /open-apis/<path>```