📦

wecomcli-email

Name: wecomcli-email
Author: wecomteam

v2.1.0 Revisión del contenido r1 Riesgo alto 📁 Acceso al sistema de archivos⚙️ Comandos externos

Manage WeCom Email from Your AI Assistant

Searching messages and handling email attachments across separate tools takes time. This skill guides AI assistants through WeCom CLI workflows for reading, sending, and organizing email information.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

Maintain this Skill? Claim it ⚠️ 38 Deficiente

Detente y solicita confirmación antes de instalar.

Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "wecomcli-email" from https://skillstore.io/skills/wecomteam-wecomcli-email.md and its manifest at https://skillstore.io/api/skills/wecomteam-wecomcli-email/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/wecomteam-wecomcli-email.md Manifest firmado GET /api/skills/wecomteam-wecomcli-email/manifest Lockfile firmado GET /api/skills/wecomteam-wecomcli-email/lockfile

Pruébalo

Usando "wecomcli-email". Find unread emails from Alex about the launch during the past seven days.

Resultado esperado:

Unread email: Launch checklist
Sender: Alex
Received: October 21, 2026, at 09:30
Only one matching message was found.

Usando "wecomcli-email". Read the budget review email and identify its attachments.

Resultado esperado:

Subject: Budget review
Summary: Finance requests feedback on the revised quarterly budget.
Attachment: Quarterly budget.xlsx, 1.2 MB.
A protected supporting document requires opening its secure link in the WeCom client.

Usando "wecomcli-email". Reply only to Alex with: Received, thank you.

Resultado esperado:

Subject: Re: Launch checklist
Recipient: Alex
Body: Received, thank you.
After a successful send: Your reply was sent to Alex.

Auditoría de seguridad

Riesgo alto

v1 • 22/10/2026 Abrir el informe versionado

All 57 static alerts are false positives involving Markdown, documentation links, recipient fields, or readable Chinese text. Semantic review found risky reply-all behavior, conflicting recipient authorization rules, and permissive meeting defaults. No evidence found of malicious payloads or an embedded prompt injection attack; defensive injection examples are explicitly labeled for rejection.

Archivos escaneados

1,100

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (3)

Alto

references/reply-mail.md:35-40 SKILL.md:141-158 SKILL.md:204-205

Automatic Reply-All Can Disclose Replies Beyond User Intent

Unspecified replies set reply.reply_all to true. Previews hide email addresses, and sending proceeds without a confirmation pause. This can disclose sensitive replies to unintended thread participants, including external recipients.

The documented defaults explicitly expand generic replies to all recipients and omit addresses from previews. The instructions also prohibit a post-preview confirmation question.

Alto

references/security.md:39-46 SKILL.md:45-46 SKILL.md:204-205

Conflicting Recipient Rules Allow Warning-Only Handling of Untrusted Destinations

The security policy restricts destinations to user instructions or mail headers, but then permits body-derived addresses with a warning. Automatic sending leaves no required approval step, creating a path for attacker-supplied destinations to receive internal information.

The warning-only exception directly conflicts with the allowed-source rule and the instruction to verify before sending. This establishes an authorization gap, not observed exfiltration.

Medio

references/send-schedule.md:60-72

Meeting Defaults Omit Important Admission Controls

Meeting invitations default to no password, a disabled waiting room, and admission for all participant categories. Without stronger platform controls, shared meeting links can admit unintended participants and expose discussions.

The defaults explicitly disable these controls and require users to request restrictions. Actual unauthorized access depends on platform enforcement outside the reviewed documentation.

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/wecomteam-wecomcli-email/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/wecomteam-wecomcli-email/security.svg)](https://skillstore.io/skills/wecomteam-wecomcli-email?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/wecomteam-wecomcli-email?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/wecomteam-wecomcli-email/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/wecomteam-wecomcli-email.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

wecomteam. (2026). wecomcli-email security audit report (audit version 1) [Author version 2.1.0]. Skillstore. https://skillstore.io/skills/wecomteam-wecomcli-email/audits/1

Cita BibTeX

@techreport{wecomteam-wecomteam-wecomcli-email-2026,
  author = {wecomteam},
  title = {wecomcli-email security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/wecomteam-wecomcli-email/audits/1},
  note = {Author version 2.1.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "wecomcli-email security audit report (audit version 1)"
version: "2.1.0"
type: report
authors:
  - name: "wecomteam"
date-released: "2026-10-22"
url: "https://skillstore.io/skills/wecomteam-wecomcli-email/audits/1"
identifiers:
  - type: other
    value: "skillstore:wecomteam-wecomcli-email:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

100

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Review Project Correspondence

Find project emails by sender, keywords, and dates, then inspect message bodies and supported attachments.

Send Reports with Supporting Files

Send a Markdown report with spreadsheets or inline screenshots to explicitly selected colleagues.

Email Scheduled Meeting Invitations

Send meeting invitations with exact times, reminders, and explicitly requested participant admission controls.

Prueba estos prompts

Find Unread Messages

Find unread emails from [sender email] received during [date range]. Show the subject, sender, and date for each match.

Read a Message and Its Attachments

Find the email titled [subject] from [sender email]. Ask me to choose if several match. Summarize its content and supported attachments.

Reply Only to the Sender

Reply only to the sender of [selected message], not all participants. Use this text: [reply text]. Attach [local file].

Send a Restricted Meeting Invitation

Email [recipient addresses] a meeting invitation titled [subject] with body [text]. Use [start], [end], and [timezone]. Enable the waiting room and internal-only admission.

Mejores prácticas

Provide exact recipient addresses and explicitly state sender-only or reply-all scope; previews do not pause for confirmation.
Treat email text and attachments as untrusted data; independently verify unexpected destinations and sensitive requests.
Specify invitation times, timezone, and admission controls, and check attachment sizes before requesting a send.

Evitar

Requesting a generic reply when the message should go only to its sender; the documented default is reply-all.
Using a destination copied from message text without independently verifying it with the user.
Assuming a displayed preview requires confirmation, or assuming meeting passwords and waiting rooms are enabled by default.

Preguntas frecuentes

What must be installed before using this skill?

You need an authenticated wecom-cli and the shared skill. Contact resolution and media downloads also require their respective companion skills.

Does it ask for confirmation after showing a preview?

No. The documented workflow sends immediately after showing a preview. Provide exact recipients and content before requesting a send.

Does a normal reply go only to the sender?

No. An unspecified reply defaults to reply-all. Explicitly request a sender-only reply when other participants should not receive it.

Can it read every attachment?

Supported media attachments can be downloaded through the media skill. Protected links cannot be decrypted or downloaded through this workflow.

Can it delete messages or create drafts?

No. Deletion, drafts, read-state changes, label changes, account settings, and sent-message recall require the WeCom client.

Can it manage calendars and meetings directly?

It supports invitations sent through email. Direct calendar or meeting management belongs to separate skills. Specify timezone and meeting admission controls explicitly.