← Back to Skills Marketplace
197
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install wecom-ccuniverse-leo
Description
文档与智能表格操作。当用户提到企业微信文档、创建文档、编辑文档、新建文档、写文档、智能表格时激活。支持文档创建/写入和智能表格的创建及子表/字段/记录写入。注意:所有文档创建和编辑请求都应使用此 skill,不要尝试用其他方式处理文档操作。
Usage Guidance
This skill appears to implement WeCom document and smart-sheet operations and relies on an mcporter CLI — that part is coherent. Before installing: (1) Be cautious about the always:true flag: it forces the skill into every agent run; only install if you accept that persistent presence. (2) The skill will ask to run npm install -g mcporter (global install). Verify the mcporter package origin and review its source on npm/GitHub before approving a global install on a production or shared machine. (3) The skill reads ~/.openclaw/wecomConfig/config.json (undeclared in required config paths) to auto-configure the MCP server; inspect that file to ensure it doesn't contain secrets you don't want read. (4) Consider whether you want the agent to automatically proceed to perform installs/config changes after a single approval. If any of these are unacceptable, do not install or request a version that removes always:true and requires explicit user approval for installation and config changes. If you need more assurance, ask the skill author for the mcporter package repo and a justification for always:true and for reading the specified config path.
Capability Analysis
Type: OpenClaw Skill
Name: wecom-ccuniverse-leo
Version: 1.0.0
The skill bundle provides a comprehensive interface for managing WeCom (Enterprise WeChat) documents and smart sheets via the `mcporter` MCP server. It includes detailed instructions for dependency management (installing `mcporter` via npm), environment-aware configuration (checking `OPENCLAW_SHELL` and reading local config files), and user-guided authorization using legitimate WeCom domains (work.weixin.qq.com). The logic is well-aligned with its stated purpose of automating document operations and does not exhibit any signs of malicious intent, unauthorized data exfiltration, or harmful prompt injection.
Capability Assessment
Purpose & Capability
The skill's name/description (WeCom doc & smart sheet operations) aligns with the declared dependency on an mcporter CLI and the SKILL.md instructions to call an MCP server. However the skill declares always:true in metadata (force-enabled for every agent run) which is not justified by the described one-off document editing use-case and is disproportionate for a narrowly scoped integration.
Instruction Scope
Runtime instructions tell the agent to run shell commands (which is expected) and to read a local config file at ~/.openclaw/wecomConfig/config.json to obtain mcpConfig.doc.type and url. The config path is referenced directly but was not declared in the skill's required config paths. The skill also mandates automatic continuation (including automated npm global install) after user approval, increasing the scope of actions the agent may take on the host.
Install Mechanism
Install spec uses npm to globally install the mcporter package (npm install -g mcporter), which is a traceable public-registry install (moderate risk). No download from arbitrary URLs or archive extraction is used. Still, global npm installs alter the system environment and should be verified (package provenance, maintainer, and content).
Credentials
No environment variables or credentials are requested, which is appropriate. But the skill instructs reading a user-local config file (~/.openclaw/wecomConfig/config.json) that was not declared in required config paths; that file may contain sensitive runtime configuration. Accessing an undeclared config path is disproportionate unless the user understands and approves it.
Persistence & Privilege
The skill is marked always:true (force-included in every agent run). This gives it persistent presence across all agent activities and increases risk if the skill is compromised or buggy. There is no strong justification in the description for always-on behaviour for a focused document editing tool.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install wecom-ccuniverse-leo - After installation, invoke the skill by name or use
/wecom-ccuniverse-leo - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
**Initial release of WeCom Doc & Smart Sheet Skill:**
- Provides document and smart sheet creation/editing for WeCom, exclusively via mcporter and MCP server.
- Automatically handles all platform checks, installations, and configurations required for document actions.
- Ensures only documents created by this skill can be edited; docid is managed internally and cannot be parsed from URLs.
- Guides users through installation/configuration errors with original, unmodified prompts and handles specific error codes.
- Supports complex smart sheet workflows: sub-tables, fields, and records operations according to strict schema.
- Includes comprehensive field type and value mapping, with key focus on data format correctness.
Metadata
Frequently Asked Questions
What is WeCom CCUniverse Leo?
文档与智能表格操作。当用户提到企业微信文档、创建文档、编辑文档、新建文档、写文档、智能表格时激活。支持文档创建/写入和智能表格的创建及子表/字段/记录写入。注意:所有文档创建和编辑请求都应使用此 skill,不要尝试用其他方式处理文档操作。 It is an AI Agent Skill for Claude Code / OpenClaw, with 197 downloads so far.
How do I install WeCom CCUniverse Leo?
Run "/install wecom-ccuniverse-leo" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is WeCom CCUniverse Leo free?
Yes, WeCom CCUniverse Leo is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does WeCom CCUniverse Leo support?
WeCom CCUniverse Leo is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created WeCom CCUniverse Leo?
It is built and maintained by Boge (@boge-net); the current version is v1.0.0.
More Skills