Habilidades wecom-unified
📦

wecom-unified

Revisión del contenido r1 Riesgo alto ⚙️ Comandos externos📁 Acceso al sistema de archivos🌐 Acceso a red🔑 Variables de entorno

Manage WeCom work from one workflow

WeCom work is spread across documents, schedules, meetings, files, and messages. This skill routes authorized requests to the correct WeCom CLI workflow with documented parameters and safeguards.

Compatible con: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠️ 38 Deficiente

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente
Review the Skillstore skill "wecom-unified" from https://skillstore.io/skills/wecomteam-wecom-unified.md and its manifest at https://skillstore.io/api/skills/wecomteam-wecom-unified/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/wecomteam-wecom-unified.md Manifest firmado GET /api/skills/wecomteam-wecom-unified/manifest Lockfile firmado GET /api/skills/wecomteam-wecom-unified/lockfile

Pruébalo

Usando "wecom-unified". Schedule a review with Chen Yu tomorrow at 10:00.

Resultado esperado:

  • I found one matching contact: Chen Yu.
  • The schedule is ready for confirmation: Review, tomorrow 10:00 to 10:30, Chen Yu.

Usando "wecom-unified". Create a smart table for weekly project status.

Resultado esperado:

  • Created a smart table for weekly project status.
  • It includes fields for project name, owner, status, update date, and notes.

Usando "wecom-unified". Send the latest report to my active work chat.

Resultado esperado:

  • I found the latest report in the authorized file space.
  • The report was sent to your active work chat.

Auditoría de seguridad

Riesgo alto
v2 • 18/8/2026 Abrir el informe versionado

Most static findings are false positives caused by multilingual documentation, Markdown code formatting, example URLs, and defensive file-handling code. The audit identified one material workflow risk: the skill can automatically install an unpinned global npm package without user confirmation. No prompt-injection language, credential exfiltration, or concealed executable payload was found in the reviewed evidence.

96
Archivos escaneados
21,712
Líneas analizadas
0
Elementos de revisión
0
Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Alto
SKILL.md:19-23
Unpinned Global Package Installation Without Confirmation
The skill directs the agent to run `npm install -g @wecom/cli` whenever the CLI is missing or outdated, without requiring user confirmation or pinning a version. This can introduce a supply-chain change with global system impact before the requested business action begins.
The installation instruction is explicit and unconditional after a missing or old CLI check. A global, unpinned package install is externally sourced and changes the local environment.

Factores de riesgo

⚙️ Comandos externos (50)
references/wecomcli-calendar-cancel.md:52-53 references/wecomcli-calendar-cancel.md:53-61 references/wecomcli-calendar-freebusy.md:146-150 references/wecomcli-calendar-update.md:104-110 references/wecomcli-calendar-update.md:110-134 references/wecomcli-meeting-list.md:222-225 references/wecomcli-meeting-search.md:169-173 references/wecomcli-meeting-update.md:70-71 references/wecomcli-meeting-update.md:71-118 references/wecomcli-smartsheet-read.md:120 references/wecomcli-smartsheet-read.md:245 references/wecomcli-smartsheet-read.md:253 references/wecomcli-smartsheet-read.md:261 scripts/build_docx.py:9 scripts/build_docx.py:11 scripts/build_docx.py:12 scripts/build_docx.py:13 scripts/build_docx.py:14 scripts/build_docx.py:15 scripts/build_docx.py:75 scripts/build_docx.py:80 scripts/build_docx.py:154 scripts/build_docx.py:166 scripts/build_docx.py:257 scripts/build_docx.py:258 scripts/build_docx.py:434 scripts/build_docx.py:469 scripts/build_docx.py:470 scripts/build_docx.py:511 scripts/build_docx.py:512 scripts/build_docx.py:514 scripts/build_docx.py:530 scripts/build_docx.py:551 scripts/build_docx.py:568 scripts/build_docx.py:569 scripts/build_docx.py:570 scripts/build_docx.py:614 scripts/build_docx.py:615 scripts/build_docx.py:628 scripts/build_docx.py:637 scripts/build_docx.py:638 scripts/build_docx.py:641 scripts/build_docx.py:653 scripts/build_docx.py:685 scripts/build_docx.py:700-702 scripts/build_docx.py:702 scripts/build_docx.py:703 scripts/build_docx.py:713 scripts/build_docx.py:729 scripts/build_docx.py:739
📁 Acceso al sistema de archivos (8)
references/wecomcli-disk.md:207 references/wecomcli-media.md:55 references/wecomcli-smartpage.md:77 references/wecomcli-smartsheet-common.md:12 references/wecomcli-smartsheet-formula.md:502 scripts/build_docx.py:512 scripts/build_docx.py:525 scripts/build_docx.py:586
🌐 Acceso a red (10)
references/wecomcli-smartpage-edit.md:128 references/wecomcli-smartpage-mdx-syntax.md:113 references/wecomcli-smartpage-mdx-syntax.md:660 references/wecomcli-smartsheet-record-values.md:105 references/wecomcli-smartsheet-record-values.md:116 references/wecomcli-smartsheet-webhook-examples.md:128 references/wecomcli-smartsheet-webhook-examples.md:146 SKILL.md:77 SKILL.md:89 SKILL.md:125
🔑 Variables de entorno (1)
scripts/build_docx.py:484
Auditado por: claude Ver historial de auditorías →
Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado
Evaluación de seguridad

Copiar enlace del informe

https://skillstore.io/skills/wecomteam-wecom-unified/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/wecomteam-wecom-unified/security.svg)](https://skillstore.io/skills/wecomteam-wecom-unified?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/wecomteam-wecom-unified?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/wecomteam-wecom-unified/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/wecomteam-wecom-unified.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citas académicas (APA · BibTeX · CFF)

Cita APA

wecomteam. (2026). wecom-unified security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/wecomteam-wecom-unified/audits/2

Cita BibTeX

@techreport{wecomteam-wecomteam-wecom-unified-2026, author = {wecomteam}, title = {wecom-unified security audit report (audit version 2)}, institution = {Skillstore}, year = {2026}, number = {2}, url = {https://skillstore.io/skills/wecomteam-wecom-unified/audits/2}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "wecom-unified security audit report (audit version 2)" version: "unspecified" type: report authors: - name: "wecomteam" date-released: "2026-08-18" url: "https://skillstore.io/skills/wecomteam-wecom-unified/audits/2" identifiers: - type: other value: "skillstore:wecomteam-wecom-unified:audit:2" description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio
68
Arquitectura
85
Mantenibilidad
87
Contenido
65
Comunidad
83
Cumplimiento de la especificación

Lo que puedes crear

Coordinate a project meeting

Check participant availability, select a bookable room, and create an authorized meeting or schedule.

Maintain team records

Create or update approved documents, online tables, and smart tables for operational work.

Handle workplace communications

Search authorized email and files, then send a message or email through the configured account.

Prueba estos prompts

Find a colleague 
Find the authorized WeCom contact named Li Ming and show the available matching names.
Create a schedule 
Schedule a 30-minute planning session with Chen Yu tomorrow afternoon. Ask me if the time is ambiguous.
Update a smart table 
In this WeCom smart table, add a record for Project Atlas with status In Progress and owner Wang Lei.
Prepare a meeting 
Find a one-hour time next week when Chen Yu and Wang Lei are free, then propose available meeting rooms before creating anything.

Mejores prácticas

  • Confirm the target, scope, and key parameters before irreversible changes or external sends.
  • Use a current-message link or an authorized search result to identify documents and tables.
  • Review names, times, recipients, and attachments before creating meetings or sending communications.

Evitar

  • Do not request or expose internal identifiers when readable names or links are available.
  • Do not assume a missing or ambiguous person, document, room, or time selection.
  • Do not rely on this skill for operations that the WeCom CLI or account permissions do not support.

Preguntas frecuentes

What does this skill require?
It requires wecom-cli, a compatible version, and an authorized WeCom account.
Can it manage documents and tables?
Yes. It supports documented workflows for documents, online tables, smart tables, and smart pages.
Can it create meetings?
Yes. It can create and manage supported online meetings and schedules after required details are resolved.
Can it send email and messages?
Yes. It supports documented email and recent-session messaging workflows through the authorized account.
Does it support recurring meetings?
No. The documented workflows do not support recurring meeting or schedule operations.
Will it show internal IDs?
No. The skill is designed to use readable names and links rather than internal identifiers in final responses.

Detalles del desarrollador

Autor

wecomteam

Licencia

MIT

Revisión de Skillstore

r1

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/wecomteam/wecom-unified/tree/2620033fdb2721fb192ac06a6a0510987035d203/skills/wecom-unified

Ref.

e22f0e5c175a84e01097fa734ec2a74420c14771

Actualidad del mantenimiento

19/8/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📁 references/

📄 wecomcli-calendar-agenda.md

📄 wecomcli-calendar-cancel.md

📄 wecomcli-calendar-create.md

📄 wecomcli-calendar-freebusy.md

📄 wecomcli-calendar-meeting-room.md

📄 wecomcli-calendar-search.md

📄 wecomcli-calendar-update.md

📄 wecomcli-calendar.md

📄 wecomcli-contact.md

📄 wecomcli-disk.md

📄 wecomcli-doc-contents-append.md

📄 wecomcli-doc-contents-overwrite.md

📄 wecomcli-doc-create.md

📄 wecomcli-doc-manage-doc-members-update.md

📄 wecomcli-doc-manage-doc-names-update.md

📄 wecomcli-doc-manage-doc-rules-update.md

📄 wecomcli-doc-manage.md

📄 wecomcli-doc.md

📄 wecomcli-email-forward-mail.md

📄 wecomcli-email-get-mail.md

📄 wecomcli-email-reply-mail.md

📄 wecomcli-email-search-mail.md

📄 wecomcli-email-security.md

📄 wecomcli-email-send-mail.md

📄 wecomcli-email-send-schedule.md

📄 wecomcli-email.md

📄 wecomcli-media.md

📄 wecomcli-meeting-cancel.md

📄 wecomcli-meeting-create.md

📄 wecomcli-meeting-list.md

📄 wecomcli-meeting-original-get.md

📄 wecomcli-meeting-search.md

📄 wecomcli-meeting-update.md

📄 wecomcli-meeting.md

📄 wecomcli-message.md

📄 wecomcli-sheet-contents-update.md

📄 wecomcli-sheet-ranges-get.md

📄 wecomcli-sheet-rows-append.md

📄 wecomcli-sheet-subsheets-add.md

📄 wecomcli-sheet-subsheets-delete.md

📄 wecomcli-sheet.md

📄 wecomcli-smartpage-data-driven-pages.md

📄 wecomcli-smartpage-edit.md

📄 wecomcli-smartpage-formula-arraylist.md

📄 wecomcli-smartpage-formula-datetime.md

📄 wecomcli-smartpage-formula-logic.md

📄 wecomcli-smartpage-formula-math.md

📄 wecomcli-smartpage-formula-operators.md

📄 wecomcli-smartpage-formula-pageblock.md

📄 wecomcli-smartpage-formula-reference.md

📄 wecomcli-smartpage-formula-templates.md

📄 wecomcli-smartpage-formula-text.md

📄 wecomcli-smartpage-formula-user.md

📄 wecomcli-smartpage-mdx-syntax.md

📄 wecomcli-smartpage.md

📄 wecomcli-smartsheet-chart-types.md

📄 wecomcli-smartsheet-common.md

📄 wecomcli-smartsheet-edit.md

📄 wecomcli-smartsheet-field-types.md

📄 wecomcli-smartsheet-formula.md

📄 wecomcli-smartsheet-read.md

📄 wecomcli-smartsheet-record-values.md

📄 wecomcli-smartsheet-template-ai_efficiency.md

📄 wecomcli-smartsheet-template-connect_to_app.md

📄 wecomcli-smartsheet-template-financial_accounting.md

📄 wecomcli-smartsheet-template-hr_and_administration.md

📄 wecomcli-smartsheet-template-ledger_records.md

📄 wecomcli-smartsheet-template-manufacturing.md

📄 wecomcli-smartsheet-template-marketing.md

📄 wecomcli-smartsheet-template-office_essentials.md

📄 wecomcli-smartsheet-template-personal_efficiency.md

📄 wecomcli-smartsheet-template-procurement_logistics.md

📄 wecomcli-smartsheet-template-project_management.md

📄 wecomcli-smartsheet-template-rd_process_customer.md

📄 wecomcli-smartsheet-template-rd_process_ops.md

📄 wecomcli-smartsheet-template-rd_process_project.md

📄 wecomcli-smartsheet-template-rd_process_research.md

📄 wecomcli-smartsheet-template-sales_and_operations.md

📄 wecomcli-smartsheet-template-store_management.md

📄 wecomcli-smartsheet-template-team_tasks.md

📄 wecomcli-smartsheet-template-wechat_customer.md

📄 wecomcli-smartsheet-template-work_report.md

📄 wecomcli-smartsheet-templates.md

📄 wecomcli-smartsheet-view-types.md

📄 wecomcli-smartsheet-webhook-examples.md

📄 wecomcli-smartsheet-webhook.md

📄 wecomcli-smartsheet.md

📄 wecomcli-todo-create.md

📄 wecomcli-todo-delete.md

📄 wecomcli-todo-finish.md

📄 wecomcli-todo-get.md

📄 wecomcli-todo-list.md

📄 wecomcli-todo-update.md

📄 wecomcli-todo.md

📁 scripts/

📄 build_docx.py

📄 SKILL.md

Más de wecomteam

Ver todo

Habilidades relacionadas

Ver todo