← Back to Skills Marketplace
WeCom文件发送
by
chongjie-ran
· GitHub ↗
· v1.0.0
· MIT-0
573
Downloads
0
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install wecom-file-sender
Description
通过企业微信将本地目录中的文件（文档、图片、视频、语音）发送给指定用户，支持文件大小限制管理。
Usage Guidance
This skill is inconsistent: it tells the agent to read local workspace directories and send files via WeCom but gives no information about how authentication or destination is configured. Before installing or using it, ask the publisher: (1) Where/how are WeCom credentials supplied (CorpID/Secret/AgentId or webhook)? (2) Which exact recipients/endpoints will receive files? (3) Can the skill be limited to specific directories or file types? (4) Will there be explicit prompts/consent each time a file is read/sent? If you can't get clear answers, avoid granting the agent access to sensitive work directories and test with a sandbox and non-sensitive files only. Consider disabling autonomous invocation or requiring explicit user confirmation before any file access or network upload.
Capability Analysis
Type: OpenClaw Skill
Name: wecom-file-sender
Version: 1.0.0
The skill 'wecom-file-sender' is designed to allow an AI agent to send local files to users via Enterprise WeChat (WeCom). The instructions in SKILL.md define a clear protocol using the 'MEDIA:' command and provide guidance for the agent to locate files within specific workspace directories (~/.openclaw/workspace/) using standard shell commands like ls and grep. There is no evidence of malicious intent, data exfiltration of sensitive system files, or obfuscation.
Capability Assessment
Purpose & Capability
The declared purpose is to send local files via 企业微信 (WeCom). However, the skill declares no credentials, environment variables, or configuration for authenticating to WeCom. A legitimate WeCom integration normally requires CorpID/CorpSecret/AgentId or a webhook/token; none are requested or documented, which is incoherent with the stated capability.
Instruction Scope
SKILL.md explicitly instructs the agent to read specific local directories (e.g. ~/.openclaw/workspace/, memory/companywork/, memory/douyin-videos/) and to run commands like ls/grep to find files. That scope includes potentially sensitive company content. The instructions do not constrain which files may be read or explain how file selection and transmission are authorized, giving the agent broad discretion to access local files.
Install Mechanism
This is an instruction-only skill with no install spec or code to write to disk. No installation-related risks were identified.
Credentials
The skill requests no environment variables or credentials, yet it claims to perform an authenticated network action (sending via WeCom). The absence of required auth/config is disproportionate and unexplained. Additionally, the skill's referencing of company-specific directories implies access to sensitive data without explicit justification or declared least-privilege boundaries.
Persistence & Privilege
The skill does not request persistent/always-on presence (always: false) and has no install actions. However, because agent autonomous invocation is allowed by default, the agent could be instructed (or decide) to access the listed local directories and send files; that runtime capability combined with the other inconsistencies raises privacy concerns. This is not a privilege escalation by itself but increases the blast radius.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install wecom-file-sender - After installation, invoke the skill by name or use
/wecom-file-sender - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
WeCom 文件发送技能 1.0.0 — 首发版本：
- 封装了将本地文件通过企业微信发送给用户的功能。
- 支持发送文档、图片、视频、语音等常见文件类型。
- 设定了不同类型文件的体积限制并自动处理超限情况。
- 提供了标准的文件发送指令 MEDIA: 及使用方法说明。
- 列出了常用触发词和详细操作示例。
- 指定了文件查找及路径格式注意事项。
Metadata
Frequently Asked Questions
What is WeCom文件发送?
通过企业微信将本地目录中的文件（文档、图片、视频、语音）发送给指定用户，支持文件大小限制管理。 It is an AI Agent Skill for Claude Code / OpenClaw, with 573 downloads so far.
How do I install WeCom文件发送?
Run "/install wecom-file-sender" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is WeCom文件发送 free?
Yes, WeCom文件发送 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does WeCom文件发送 support?
WeCom文件发送 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created WeCom文件发送?
It is built and maintained by chongjie-ran (@chongjie-ran); the current version is v1.0.0.
More Skills