wecom-meeting

企业微信会议管理工具。用于创建、查询、取消和管理企业微信预约会议。支持创建预约会议、获取会议详情、取消会议、获取成员会议列表等操作。使用企业微信会议API需要配置CorpID、Secret和AgentID。当用户需要创建企业微信会议、查询会议信息、取消会议或管理会议时使用此Skill。

This skill appears to implement exactly what it claims (WeCom meeting management), but the package metadata omitted that it needs your WeCom credentials. Before installing or running: 1) verify the publisher/source (no homepage provided); 2) review the code (wecom_meeting_api.py) yourself; 3) prefer storing secrets in a secure place (use environment variables, a credential manager, or ensure ~/.wecom/config.json has strict filesystem permissions) rather than leaving them in a world-readable file; 4) run the scripts inside an isolated virtual environment; 5) avoid executing the module's test block if you don't want it to attempt to fetch and print an access token; and 6) only allow network calls to the official qyapi.weixin.qq.com endpoints and ensure your application has the minimal required permissions. If the author cannot explain why the registry metadata left out the credential/config requirement, treat the omission as a red flag and consider not installing it.

Type: OpenClaw Skill Name: wecom-meeting Version: 1.0.0 The skill bundle is a legitimate tool for managing Enterprise WeChat (WeCom) meetings. The Python scripts (scripts/wecom_meeting_api.py and others) implement standard API interactions with the official WeCom domain (qyapi.weixin.qq.com) and follow documented procedures for authentication and meeting management. It uses a local configuration file (~/.wecom/config.json) for credential storage, which is standard practice for CLI tools, and shows no signs of data exfiltration, obfuscation, or malicious intent.