Навыки wecomcli-smartpage

📦

wecomcli-smartpage

Name: wecomcli-smartpage
Author: wecomteam

Ревизия содержимого r1 Средний риск 📁 Доступ к файловой системе🌐 Доступ к сети⚙️ Внешние команды

Create and Edit WeCom Smartpage Documents

Maintaining structured WeCom documents requires coordinated page, content, and data updates. This skill guides CLI workflows for document imports, precise edits, attachments, charts, and forms.

Поддерживает: Claude Codex Code(CC)

📊 68 Адекватно

Maintain this Skill? Claim it 📊 68 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "wecomcli-smartpage" from https://skillstore.io/skills/wecomteam-wecomcli-smartpage.md and its manifest at https://skillstore.io/api/skills/wecomteam-wecomcli-smartpage/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/wecomteam-wecomcli-smartpage.md Подписанный manifest GET /api/skills/wecomteam-wecomcli-smartpage/manifest Подписанный lockfile GET /api/skills/wecomteam-wecomcli-smartpage/lockfile

Протестировать

Использование «wecomcli-smartpage». Summarize the project overview page using text only.

Ожидаемый результат:

Project status: Testing is in progress.
Completed work: The team finished the initial review.
Next step: Resolve the remaining issues before release.

Использование «wecomcli-smartpage». Update one section of the release page while preserving the remaining content.

Ожидаемый результат:

Updated the requested section on the release page. Other blocks and page structure remain unchanged.

Использование «wecomcli-smartpage». Edit a document using its published Smartpage link.

Ожидаемый результат:

This link opens a published, read-only document. Please provide the editable Smartpage link before making changes.

Аудит безопасности

Средний риск

v1 • 22.10.2026 Открыть версионный отчет

All 90 static matches are false positives involving Markdown syntax, readable Chinese documentation, service URL examples, and a temporary import file. One semantic issue remains: document-controlled image URLs are downloaded with redirects without destination validation, creating an SSRF risk. No evidence found of malware, credential theft, or audit-directed prompt injection in the reviewed files.

Просканировано файлов

4,102

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (1)

Средний

references/smartpage-edit.md:64-75

Unvalidated Document Image Downloads

The workflow collects every image URL from document Markdown and downloads each using curl -sSL without destination validation. A document author could induce requests to internal services or attacker-controlled hosts, including through redirects.

The workflow explicitly turns document image references into network requests and enables redirect following without scheme, host, or address restrictions. Exploitability depends on host network access and downloader safeguards.

Факторы риска

📁 Доступ к файловой системе (2)

references/data-driven-pages.md:21 SKILL.md:103

🌐 Доступ к сети (7)

references/mdx-syntax.md:113 references/mdx-syntax.md:660 references/smartpage-edit.md:145 SKILL.md:3 SKILL.md:136 SKILL.md:137 SKILL.md:184

⚙️ Внешние команды (50)

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/wecomteam-wecomcli-smartpage/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/wecomteam-wecomcli-smartpage/security.svg)](https://skillstore.io/skills/wecomteam-wecomcli-smartpage?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/wecomteam-wecomcli-smartpage?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/wecomteam-wecomcli-smartpage/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/wecomteam-wecomcli-smartpage.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

wecomteam. (2026). wecomcli-smartpage security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/wecomteam-wecomcli-smartpage/audits/1

Цитата BibTeX

@techreport{wecomteam-wecomteam-wecomcli-smartpage-2026,
  author = {wecomteam},
  title = {wecomcli-smartpage security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/wecomteam-wecomcli-smartpage/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "wecomcli-smartpage security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "wecomteam"
date-released: "2026-10-22"
url: "https://skillstore.io/skills/wecomteam-wecomcli-smartpage/audits/1"
identifiers:
  - type: other
    value: "skillstore:wecomteam-wecomcli-smartpage:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Maintain Project Updates

Import a weekly report, append progress notes, and update selected blocks without replacing unrelated content.

Build Operational Dashboards

Prepare built-in table fields through a companion skill, then add charts and filtered views to a Smartpage document.

Create Registration Forms

Build input controls and submission buttons that store responses in the document's built-in data tables.

Попробуйте эти промпты

Read a Document

Read [document link] and summarize the named pages and their main points. Do not change any content. Use text only.

Import a Markdown Report

Import [local Markdown file] as a new Smartpage document. Ask me for its Chinese title, preserve the headings, and return the document link.

Edit One Section

In [document link], update [section] on [page name] with [replacement text]. Read current content first and preserve all other blocks.

Build a Data Collection Dashboard

Build an event registration form and attendance dashboard in [editable document link]. Configure built-in tables through wecomcli-smartsheet before adding controls, submission formulas, and charts.

Лучшие практики

Read the current page and confirm the target before editing; use block-level changes for local updates.
Create built-in table fields before adding charts or submission buttons that reference them.
Confirm deletions and full-page replacements explicitly; validate image destinations before downloading document images.

Избегать

Using a full-page overwrite to change one paragraph or component.
Inventing document, page, or block identifiers instead of retrieving actual values.
Using static Markdown import for forms or charts that require built-in database fields.