wecom-user-manager

企业微信用户管理技能。支持管理员添加用户权限，用户首次登录自动激活。包含完整的用户生命周期管理。

This skill appears to implement the stated WeCom user management features, but exercise caution before installing: 1) The Python scripts import modules that are not included in the packaged file list (permission_manager, add_user_mini). Verify those modules are present and review their code before enabling the skill — missing/incomplete packaging could hide additional behavior. 2) The skill expects to read/write plugin/workspace config files (plugin/config/users.json and workspace/config/users.json). Back up those config files and inspect the skill's file I/O behavior to ensure it only touches expected user records. 3) The SKILL.md instructs you to allow the 'wecom_mcp' tool via openclaw config; granting that tool access delegates action to an external helper — confirm you trust wecom_mcp and that it doesn't perform unexpected network calls or exfiltrate data. 4) Because there are gaps between declared metadata and actual instructions (undeclared config paths and missing modules), test the skill in an isolated environment or sandbox first. If you plan to use it in production, request the missing modules from the author or obtain a complete repository and perform a code review of permission_manager and add_user_mini before granting permissions. If you cannot obtain or review the missing components and confirm the wecom_mcp tool's behavior, do not enable this skill with write permissions to your production configs.

Type: OpenClaw Skill Name: wecom-user-manager Version: 1.0.0 The skill bundle provides a legitimate administrative toolset for managing Enterprise WeChat (WeCom) users, including adding permissions and handling automatic activation. The Python scripts (handler.py and auto_activate.py) implement standard logic for user lifecycle management, such as updating a local configuration file and generating confirmation cards. While the code references external modules like 'permission_manager' and 'add_user_mini' that are not included in the provided files, the overall structure, detailed documentation (SKILL.md, README.md), and alignment with the stated purpose indicate no malicious intent or high-risk behaviors like data exfiltration or unauthorized execution.