← Back to Skills Marketplace
213
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install wecom-mcp-setup
Description
企业微信 MCP 配置指南。当用户需要"添加企业微信"、"配置企微"、"启用企微消息"、"设置企业微信集成"时触发。提供完整的 MCP Server 配置、权限白名单设置和 Gateway 重启指引。
Usage Guidance
This is a legitimate, coherent setup guide for adding a WeCom MCP server to OpenClaw, but take these precautions before following it: 1) Treat the WECOM_* values as sensitive — do not commit mcporter.json into version control; store secrets in an encrypted store or OS secret manager if possible. 2) The guide runs the MCP server via 'npx -y wecom-mcp-server' which downloads and executes code from npm on demand — verify the package name, publisher, and ideally pin a specific version (e.g., [email protected]) or use a vetted release build (GitHub release or org-maintained artifact). 3) If you cannot verify the npm package, consider installing the server from a trusted source or running it in an isolated environment (container or restricted host). 4) After initial setup, rotate the application secret if it was exposed during testing. 5) If you want stronger guarantees, ask the skill author for the upstream package repository or an official vendor reference before using npx to run it.
Capability Analysis
Type: OpenClaw Skill
Name: wecom-mcp-setup
Version: 1.0.0
The skill bundle provides a legitimate configuration guide for integrating Enterprise WeChat (WeCom) with OpenClaw via an MCP server. It contains standard instructions for modifying local configuration files (~/.openclaw/workspace/config/mcporter.json) and setting tool permissions using the 'openclaw' CLI. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found in SKILL.md or _meta.json.
Capability Assessment
Purpose & Capability
Name/description (WeCom MCP configuration) match the instructions: editing OpenClaw mcporter.json, adding a wecom_mcp server, enabling tool whitelist, restarting Gateway, and validating. The steps and commands (openclaw, mcporter list, gateway restart) are coherent with the stated goal.
Instruction Scope
Instructions are narrowly scoped to MCP setup: edit ~/.openclaw/workspace/config/mcporter.json to add a wecom_mcp entry, set tools.alsoAllow if needed, restart gateway, and verify with mcporter list. They explicitly instruct placing WECOM_CORP_ID / WECOM_AGENT_ID / WECOM_SECRET in the config file (plaintext), which is expected for this task but carries the usual secret-management risks. No unrelated system-wide reads or exfiltration steps are present.
Install Mechanism
There is no formal install spec in the registry (instruction-only). The SKILL.md instructs running the server via 'npx -y wecom-mcp-server', which will fetch and execute a package from the npm registry at runtime. This is coherent for running a node-based MCP server, but it introduces moderate risk because npx downloads third-party code on demand (possible supply-chain/typosquatting risk). The skill does not suggest pinning a package version or verifying package provenance.
Credentials
The skill does not request additional environment variables or external credentials from the registry metadata. The credentials it instructs the admin to provide (Corp ID, Agent ID, Secret) are exactly what a WeCom integration needs; their placement in a local config file is proportionate but should be treated as sensitive data.
Persistence & Privilege
Skill is not always-enabled and is user-invocable. It is instruction-only and does not request persistent elevated privileges or modify other skills. The runtime actions (editing a local OpenClaw config and restarting the Gateway) are appropriate for configuring the integration.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install wecom-mcp-setup - After installation, invoke the skill by name or use
/wecom-mcp-setup - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: 企业微信 MCP 配置指南
Metadata
Frequently Asked Questions
What is WeCom MCP Setup?
企业微信 MCP 配置指南。当用户需要"添加企业微信"、"配置企微"、"启用企微消息"、"设置企业微信集成"时触发。提供完整的 MCP Server 配置、权限白名单设置和 Gateway 重启指引。 It is an AI Agent Skill for Claude Code / OpenClaw, with 213 downloads so far.
How do I install WeCom MCP Setup?
Run "/install wecom-mcp-setup" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is WeCom MCP Setup free?
Yes, WeCom MCP Setup is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does WeCom MCP Setup support?
WeCom MCP Setup is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created WeCom MCP Setup?
It is built and maintained by stliuexp (@stliuexp); the current version is v1.0.0.
More Skills