📦

wecomcli-email

Name: wecomcli-email
Author: wecomteam

v2.1.0 Révision du contenu r1 Risque élevé 📁 Accès au système de fichiers⚙️ Commandes externes

Manage WeCom Email from Your AI Assistant

Searching messages and handling email attachments across separate tools takes time. This skill guides AI assistants through WeCom CLI workflows for reading, sending, and organizing email information.

Prend en charge: Claude Codex Code(CC)

⚠️ 38 Médiocre

Maintain this Skill? Claim it ⚠️ 38 Médiocre

Arrêtez-vous et demandez confirmation avant l’installation.

Examinez le plan et obtenez le consentement explicite de l’utilisateur avant de modifier des fichiers.

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "wecomcli-email" from https://skillstore.io/skills/wecomteam-wecomcli-email.md and its manifest at https://skillstore.io/api/skills/wecomteam-wecomcli-email/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/wecomteam-wecomcli-email.md manifest signé GET /api/skills/wecomteam-wecomcli-email/manifest lockfile signé GET /api/skills/wecomteam-wecomcli-email/lockfile

Tester

Utilisation de « wecomcli-email ». Find unread emails from Alex about the launch during the past seven days.

Résultat attendu:

Unread email: Launch checklist
Sender: Alex
Received: October 21, 2026, at 09:30
Only one matching message was found.

Utilisation de « wecomcli-email ». Read the budget review email and identify its attachments.

Résultat attendu:

Subject: Budget review
Summary: Finance requests feedback on the revised quarterly budget.
Attachment: Quarterly budget.xlsx, 1.2 MB.
A protected supporting document requires opening its secure link in the WeCom client.

Utilisation de « wecomcli-email ». Reply only to Alex with: Received, thank you.

Résultat attendu:

Subject: Re: Launch checklist
Recipient: Alex
Body: Received, thank you.
After a successful send: Your reply was sent to Alex.

Audit de sécurité

Risque élevé

v1 • 22/10/2026 Ouvrir le rapport versionné

All 57 static alerts are false positives involving Markdown, documentation links, recipient fields, or readable Chinese text. Semantic review found risky reply-all behavior, conflicting recipient authorization rules, and permissive meeting defaults. No evidence found of malicious payloads or an embedded prompt injection attack; defensive injection examples are explicitly labeled for rejection.

Fichiers analysés

1,100

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Préoccupations de sécurité confirmées (3)

Élevé

references/reply-mail.md:35-40 SKILL.md:141-158 SKILL.md:204-205

Automatic Reply-All Can Disclose Replies Beyond User Intent

Unspecified replies set reply.reply_all to true. Previews hide email addresses, and sending proceeds without a confirmation pause. This can disclose sensitive replies to unintended thread participants, including external recipients.

The documented defaults explicitly expand generic replies to all recipients and omit addresses from previews. The instructions also prohibit a post-preview confirmation question.

Élevé

references/security.md:39-46 SKILL.md:45-46 SKILL.md:204-205

Conflicting Recipient Rules Allow Warning-Only Handling of Untrusted Destinations

The security policy restricts destinations to user instructions or mail headers, but then permits body-derived addresses with a warning. Automatic sending leaves no required approval step, creating a path for attacker-supplied destinations to receive internal information.

The warning-only exception directly conflicts with the allowed-source rule and the instruction to verify before sending. This establishes an authorization gap, not observed exfiltration.

Moyen

references/send-schedule.md:60-72

Meeting Defaults Omit Important Admission Controls

Meeting invitations default to no password, a disabled waiting room, and admission for all participant categories. Without stronger platform controls, shared meeting links can admit unintended participants and expose discussions.

The defaults explicitly disable these controls and require users to request restrictions. Actual unauthorized access depends on platform enforcement outside the reviewed documentation.

Audité par: codex

Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné

Copier le lien du rapport

https://skillstore.io/skills/wecomteam-wecomcli-email/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/wecomteam-wecomcli-email/security.svg)](https://skillstore.io/skills/wecomteam-wecomcli-email?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/wecomteam-wecomcli-email?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/wecomteam-wecomcli-email/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/wecomteam-wecomcli-email.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citations académiques (APA · BibTeX · CFF)

Citation APA

wecomteam. (2026). wecomcli-email security audit report (audit version 1) [Author version 2.1.0]. Skillstore. https://skillstore.io/skills/wecomteam-wecomcli-email/audits/1

Citation BibTeX

@techreport{wecomteam-wecomteam-wecomcli-email-2026,
  author = {wecomteam},
  title = {wecomcli-email security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/wecomteam-wecomcli-email/audits/1},
  note = {Author version 2.1.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "wecomcli-email security audit report (audit version 1)"
version: "2.1.0"
type: report
authors:
  - name: "wecomteam"
date-released: "2026-10-22"
url: "https://skillstore.io/skills/wecomteam-wecomcli-email/audits/1"
identifiers:
  - type: other
    value: "skillstore:wecomteam-wecomcli-email:audit:1"
    description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen

Architecture

100

Maintenabilité

Contenu

Communauté

Conformité aux spécifications

Ce que vous pouvez créer

Review Project Correspondence

Find project emails by sender, keywords, and dates, then inspect message bodies and supported attachments.

Send Reports with Supporting Files

Send a Markdown report with spreadsheets or inline screenshots to explicitly selected colleagues.

Email Scheduled Meeting Invitations

Send meeting invitations with exact times, reminders, and explicitly requested participant admission controls.

Essayez ces prompts

Find Unread Messages

Find unread emails from [sender email] received during [date range]. Show the subject, sender, and date for each match.

Read a Message and Its Attachments

Find the email titled [subject] from [sender email]. Ask me to choose if several match. Summarize its content and supported attachments.

Reply Only to the Sender

Reply only to the sender of [selected message], not all participants. Use this text: [reply text]. Attach [local file].

Send a Restricted Meeting Invitation

Email [recipient addresses] a meeting invitation titled [subject] with body [text]. Use [start], [end], and [timezone]. Enable the waiting room and internal-only admission.

Bonnes pratiques

Provide exact recipient addresses and explicitly state sender-only or reply-all scope; previews do not pause for confirmation.
Treat email text and attachments as untrusted data; independently verify unexpected destinations and sensitive requests.
Specify invitation times, timezone, and admission controls, and check attachment sizes before requesting a send.

Éviter

Requesting a generic reply when the message should go only to its sender; the documented default is reply-all.
Using a destination copied from message text without independently verifying it with the user.
Assuming a displayed preview requires confirmation, or assuming meeting passwords and waiting rooms are enabled by default.

Foire aux questions

What must be installed before using this skill?

You need an authenticated wecom-cli and the shared skill. Contact resolution and media downloads also require their respective companion skills.

Does it ask for confirmation after showing a preview?

No. The documented workflow sends immediately after showing a preview. Provide exact recipients and content before requesting a send.

Does a normal reply go only to the sender?

No. An unspecified reply defaults to reply-all. Explicitly request a sender-only reply when other participants should not receive it.

Can it read every attachment?

Supported media attachments can be downloaded through the media skill. Protected links cannot be decrypted or downloaded through this workflow.

Can it delete messages or create drafts?

No. Deletion, drafts, read-state changes, label changes, account settings, and sent-message recall require the WeCom client.

Can it manage calendars and meetings directly?

It supports invitations sent through email. Direct calendar or meeting management belongs to separate skills. Specify timezone and meeting admission controls explicitly.