스킬 wecom-unified

📦

wecom-unified

Name: wecom-unified
Author: wecomteam

콘텐츠 리비전 r1 높은 위험 ⚙️ 외부 명령어📁 파일 시스템 접근🌐 네트워크 접근🔑 환경 변수

Manage WeCom work from one workflow

WeCom work is spread across documents, schedules, meetings, files, and messages. This skill routes authorized requests to the correct WeCom CLI workflow with documented parameters and safeguards.

지원: Claude Codex Code(CC)

⚠️ 38 나쁨

Maintain this Skill? Claim it ⚠️ 38 나쁨

설치 전에 중지하고 확인을 요청하세요.

계획을 검토하고 파일을 변경하기 전에 사용자의 명시적 동의를 받으세요.

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "wecom-unified" from https://skillstore.io/skills/wecomteam-wecom-unified.md and its manifest at https://skillstore.io/api/skills/wecomteam-wecom-unified/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/wecomteam-wecom-unified.md 서명된 manifest GET /api/skills/wecomteam-wecom-unified/manifest 서명된 lockfile GET /api/skills/wecomteam-wecom-unified/lockfile

테스트해 보기

"wecom-unified" 사용 중입니다. Schedule a review with Chen Yu tomorrow at 10:00.

예상 결과:

I found one matching contact: Chen Yu.
The schedule is ready for confirmation: Review, tomorrow 10:00 to 10:30, Chen Yu.

"wecom-unified" 사용 중입니다. Create a smart table for weekly project status.

예상 결과:

Created a smart table for weekly project status.
It includes fields for project name, owner, status, update date, and notes.

"wecom-unified" 사용 중입니다. Send the latest report to my active work chat.

예상 결과:

I found the latest report in the authorized file space.
The report was sent to your active work chat.

보안 감사

높은 위험

v2 • 2026. 8. 18. 버전별 보고서 열기

Most static findings are false positives caused by multilingual documentation, Markdown code formatting, example URLs, and defensive file-handling code. The audit identified one material workflow risk: the skill can automatically install an unpinned global npm package without user confirmation. No prompt-injection language, credential exfiltration, or concealed executable payload was found in the reviewed evidence.

스캔된 파일

21,712

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (1)

높음

SKILL.md:19-23

Unpinned Global Package Installation Without Confirmation

The skill directs the agent to run `npm install -g @wecom/cli` whenever the CLI is missing or outdated, without requiring user confirmation or pinning a version. This can introduce a supply-chain change with global system impact before the requested business action begins.

The installation instruction is explicit and unconditional after a missing or old CLI check. A global, unpinned package install is externally sourced and changes the local environment.

위험 요인

⚙️ 외부 명령어 (50)

📁 파일 시스템 접근 (8)

references/wecomcli-disk.md:207 references/wecomcli-media.md:55 references/wecomcli-smartpage.md:77 references/wecomcli-smartsheet-common.md:12 references/wecomcli-smartsheet-formula.md:502 scripts/build_docx.py:512 scripts/build_docx.py:525 scripts/build_docx.py:586

🌐 네트워크 접근 (10)

references/wecomcli-smartpage-edit.md:128 references/wecomcli-smartpage-mdx-syntax.md:113 references/wecomcli-smartpage-mdx-syntax.md:660 references/wecomcli-smartsheet-record-values.md:105 references/wecomcli-smartsheet-record-values.md:116 references/wecomcli-smartsheet-webhook-examples.md:128 references/wecomcli-smartsheet-webhook-examples.md:146 SKILL.md:77 SKILL.md:89 SKILL.md:125

🔑 환경 변수 (1)

scripts/build_docx.py:484

감사자: claude 감사 이력 보기 →

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/wecomteam-wecom-unified/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/wecomteam-wecom-unified/security.svg)](https://skillstore.io/skills/wecomteam-wecom-unified?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/wecomteam-wecom-unified?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/wecomteam-wecom-unified/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/wecomteam-wecom-unified.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

wecomteam. (2026). wecom-unified security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/wecomteam-wecom-unified/audits/2

BibTeX 인용

@techreport{wecomteam-wecomteam-wecom-unified-2026,
  author = {wecomteam},
  title = {wecom-unified security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/wecomteam-wecom-unified/audits/2},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "wecom-unified security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
  - name: "wecomteam"
date-released: "2026-08-18"
url: "https://skillstore.io/skills/wecomteam-wecom-unified/audits/2"
identifiers:
  - type: other
    value: "skillstore:wecomteam-wecom-unified:audit:2"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Coordinate a project meeting

Check participant availability, select a bookable room, and create an authorized meeting or schedule.

Maintain team records

Create or update approved documents, online tables, and smart tables for operational work.

Handle workplace communications

Search authorized email and files, then send a message or email through the configured account.

이 프롬프트를 사용해 보세요

Find a colleague

Find the authorized WeCom contact named Li Ming and show the available matching names.

Create a schedule

Schedule a 30-minute planning session with Chen Yu tomorrow afternoon. Ask me if the time is ambiguous.

Update a smart table

In this WeCom smart table, add a record for Project Atlas with status In Progress and owner Wang Lei.

Prepare a meeting

Find a one-hour time next week when Chen Yu and Wang Lei are free, then propose available meeting rooms before creating anything.

모범 사례

Confirm the target, scope, and key parameters before irreversible changes or external sends.
Use a current-message link or an authorized search result to identify documents and tables.
Review names, times, recipients, and attachments before creating meetings or sending communications.

피하기

Do not request or expose internal identifiers when readable names or links are available.
Do not assume a missing or ambiguous person, document, room, or time selection.
Do not rely on this skill for operations that the WeCom CLI or account permissions do not support.