Навыки wecomcli-calendar

📦

wecomcli-calendar

Name: wecomcli-calendar
Author: wecomteam

Ревизия содержимого r1 Средний риск 📁 Доступ к файловой системе⚙️ Внешние команды

Manage WeCom Schedules and Room Bookings

Coordinating calendars, participants, and meeting rooms requires several separate checks. This skill guides compatible assistants through WeCom CLI workflows for schedules, availability, and room bookings.

Поддерживает: Claude Codex Code(CC)

📊 67 Адекватно

Maintain this Skill? Claim it 📊 67 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "wecomcli-calendar" from https://skillstore.io/skills/wecomteam-wecomcli-calendar.md and its manifest at https://skillstore.io/api/skills/wecomteam-wecomcli-calendar/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/wecomteam-wecomcli-calendar.md Подписанный manifest GET /api/skills/wecomteam-wecomcli-calendar/manifest Подписанный lockfile GET /api/skills/wecomteam-wecomcli-calendar/lockfile

Протестировать

Использование «wecomcli-calendar». Show my WeCom schedules for October 23.

Ожидаемый результат:

Subject: Design Review
Time: October 23, 14:00-14:45
Participants: Alice Chen, Bob Li

Использование «wecomcli-calendar». Find a shared hour for Alice Chen, Bob Li, and me tomorrow afternoon.

Ожидаемый результат:

Option 1: October 23, 14:00-15:00. Everyone is available.
Option 2: October 23, 16:00-17:00. Everyone is available.
Which option do you prefer?

Использование «wecomcli-calendar». Cancel my recurring team schedule.

Ожидаемый результат:

Cancelling recurring schedules is not supported. Please cancel it in the WeCom client.

Аудит безопасности

Средний риск

v1 • 22.10.2026 Открыть версионный отчет

All 172 static alerts are false positives involving Markdown links, backticks, business identifiers, and readable multilingual documentation. One semantic concern is the unverified assumption of prior confirmation before calendar writes. No evidence found of credential exfiltration, hidden payloads, or malicious prompt injection in the reviewed files.

Просканировано файлов

1,745

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (1)

Средний

SKILL.md:155-159 references/calendar-create.md:169-171 references/calendar-cancel.md:97-98 references/calendar-update.md:262

Unverified Prior Confirmation for Calendar Writes

SKILL.md says to execute writes directly because an upstream interaction already confirmed them. The workflows do not verify that assumption before sending invitations, changing schedules, or cancelling events with resolved targets and inferred parameters.

The instructions explicitly omit final confirmation and assume it happened elsewhere. Ambiguity checks reduce exposure, but no confirmation record is required in these files.

Факторы риска

📁 Доступ к файловой системе (20)

⚙️ Внешние команды (50)

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/wecomteam-wecomcli-calendar/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/wecomteam-wecomcli-calendar/security.svg)](https://skillstore.io/skills/wecomteam-wecomcli-calendar?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/wecomteam-wecomcli-calendar?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/wecomteam-wecomcli-calendar/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/wecomteam-wecomcli-calendar.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

wecomteam. (2026). wecomcli-calendar security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/wecomteam-wecomcli-calendar/audits/1

Цитата BibTeX

@techreport{wecomteam-wecomteam-wecomcli-calendar-2026,
  author = {wecomteam},
  title = {wecomcli-calendar security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/wecomteam-wecomcli-calendar/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "wecomcli-calendar security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "wecomteam"
date-released: "2026-10-22"
url: "https://skillstore.io/skills/wecomteam-wecomcli-calendar/audits/1"
identifiers:
  - type: other
    value: "skillstore:wecomteam-wecomcli-calendar:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Review a Personal Workday

Check upcoming schedules and see subjects, times, and participant names in a concise agenda.

Coordinate a Team Review

Resolve participant names, compare availability, and create a single review schedule after choosing a suitable time.

Arrange Office Space

Find an available room with suitable capacity and attach it to a new or existing schedule.

Попробуйте эти промпты

View Today's Agenda

Show my WeCom schedules for today, ordered by start time.

Find a Schedule

Find my WeCom schedules with Product Review in the subject. Show the times and participants.

Coordinate a New Schedule

Create a WeCom schedule titled Design Review with Alice Chen and Bob Li tomorrow afternoon for 45 minutes. Show available start times first.

Reschedule and Change Rooms

Find tomorrow's nonrecurring Design Review schedule. Move it one hour later, check attendee availability, and find a bookable room for everyone. Let me choose among alternatives.

Лучшие практики

Provide an explicit subject, participant names, date, duration, and time zone when relevant.
Resolve ambiguous participants and schedules before writing; confirm the final operation when prior authorization is unclear.
Use returned availability and room candidates, and approve alternatives when the requested time or room is unavailable.

Избегать

Do not treat a meeting room name in the location field as a confirmed room booking.
Do not cancel and recreate an event to reschedule it, especially when it contains an online meeting link.
Do not simulate recurring schedules through repeated single-event writes or unsupported parameters.

Часто задаваемые вопросы

What must be installed before using this skill?

You need wecom-cli, authorized WeCom access, and the wecomcli-shared prerequisite checks. Contact lookup requires wecomcli-contact.

Can it create online meetings with joining links?

No. Online meetings are routed to wecomcli-meeting. Ambiguous creation requests require clarification before either workflow runs.

Can it manage recurring schedules or invitation responses?

It can display recurring schedule information, but cannot create, update, or cancel recurring schedules. Invitation responses require the WeCom client.

How far can it browse my calendar?

Schedule list queries cover the 30 days before and after the current time. Out-of-range requests require a shorter supported range.

Does naming a room reserve it?

No. The workflow must find a bookable room and pass its returned identifier into schedule creation or update.

Will it ask before changing my calendar?

It asks about missing information and ambiguous choices. Once parameters are ready, the documented workflow executes writes without a final confirmation.