← Back to Skills Marketplace
mmxagent-skill-wecom
by
OreoAndYuumi
· GitHub ↗
· v1.0.0
· MIT-0
109
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install mmxagent-skill-wecom
Description
连接企业微信。调用 generate 接口获取授权链接，用户把链接发到企业微信聊天里点开完成授权。用户提到连接企业微信、接入企微、绑定企微机器人、创建企微机器人、扫码绑定企微时使用。
Usage Guidance
This skill appears to do what it claims (set up a WeCom bot) but the package metadata is incomplete. Before installing: 1) Confirm you trust requests to https://work.weixin.qq.com/ai/qc/* and that those endpoints are legitimate for your environment. 2) Ensure you have an HTTP client (curl or equivalent) and the 'openclaw' CLI available — the skill assumes these but doesn't declare them. 3) Back up ~/.openclaw/openclaw.json and be prepared that the skill will write botId/secret into that file and run 'openclaw gateway restart'. 4) If you need stricter control, ask the skill author to update metadata to declare required binaries and the config path, or run the flow manually (call generate, paste auth_url, then perform the polling and config write yourself) so you can review and approve the exact changes. If you cannot verify the endpoints or do not want automated writes/restarts, treat this as untrusted and perform the integration manually.
Capability Analysis
Type: OpenClaw Skill
Name: mmxagent-skill-wecom
Version: 1.0.0
The skill facilitates a standard integration between OpenClaw and Enterprise WeChat (WeCom) using official API endpoints (work.weixin.qq.com). It follows a legitimate OAuth-like flow where it generates an authorization URL, polls for credentials after user confirmation, and updates the local configuration file (~/.openclaw/openclaw.json). While it performs sensitive actions like writing credentials and restarting the gateway, these behaviors are transparently documented and directly aligned with the skill's stated purpose.
Capability Assessment
Purpose & Capability
The skill's name/description (connect WeCom) align with the runtime behavior (call generate → give user auth_url → poll → store botId/secret). However the manifest declares no required binaries or config paths while the instructions clearly expect network access, curl (or equivalent HTTP client), an 'openclaw' CLI, and write access to ~/.openclaw/openclaw.json. The omission in metadata is inconsistent with the actual capability.
Instruction Scope
SKILL.md prescribes concrete network calls to work.weixin.qq.com, extracting scode/auth_url, handing the auth_url to the user, polling for results, writing credentials into ~/.openclaw/openclaw.json, and running 'openclaw gateway restart'. These steps are within the advertised purpose but the instructions instruct modifying a user config file and restarting the gateway — operations with side effects that should have been declared and exposed to user consent. The file path and restart step are not listed in the skill's declared requirements.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so it does not download or install third-party code. That lowers installation risk. The runtime still expects local tools and network access, which are not installed by the skill.
Credentials
The skill does not request environment variables or external credentials in metadata, and it does not exfiltrate arbitrary env vars in the instructions. It will, however, obtain and store botId/secret from the WeCom flow into the user's OpenClaw config — this is proportional to the feature but is a sensitive write operation that the skill did not declare. No other unrelated credentials are requested.
Persistence & Privilege
always:false (good). The skill instructs writing persistent credentials into ~/.openclaw/openclaw.json and restarting the gateway, which grants it the ability to alter the agent's configuration and operational state. That behavior can be legitimate for an integration, but users should explicitly consent and be aware. The skill does not try to modify other skills or system-wide settings beyond its own config, per instructions.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mmxagent-skill-wecom - After installation, invoke the skill by name or use
/mmxagent-skill-wecom - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the WeCom connection skill.
- Provides a step-by-step flow for authorizing and binding OpenClaw to WeCom (企业微信).
- Supplies users with an authorization link (auth_url) to share in a WeCom chat for authentication.
- Waits for explicit user confirmation before polling for authorization result.
- On success, writes credentials to OpenClaw configuration and restarts the gateway.
- Includes clear user instructions and strict process controls to prevent unintended actions.
Metadata
Frequently Asked Questions
What is mmxagent-skill-wecom?
连接企业微信。调用 generate 接口获取授权链接，用户把链接发到企业微信聊天里点开完成授权。用户提到连接企业微信、接入企微、绑定企微机器人、创建企微机器人、扫码绑定企微时使用。 It is an AI Agent Skill for Claude Code / OpenClaw, with 109 downloads so far.
How do I install mmxagent-skill-wecom?
Run "/install mmxagent-skill-wecom" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is mmxagent-skill-wecom free?
Yes, mmxagent-skill-wecom is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does mmxagent-skill-wecom support?
mmxagent-skill-wecom is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created mmxagent-skill-wecom?
It is built and maintained by OreoAndYuumi (@oreoandyuumi); the current version is v1.0.0.
More Skills