← 返回 Skills 市场
mmxagent-skill-wecom
作者
OreoAndYuumi
· GitHub ↗
· v1.0.0
· MIT-0
109
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install mmxagent-skill-wecom
功能描述
连接企业微信。调用 generate 接口获取授权链接，用户把链接发到企业微信聊天里点开完成授权。用户提到连接企业微信、接入企微、绑定企微机器人、创建企微机器人、扫码绑定企微时使用。
安全使用建议
This skill appears to do what it claims (set up a WeCom bot) but the package metadata is incomplete. Before installing: 1) Confirm you trust requests to https://work.weixin.qq.com/ai/qc/* and that those endpoints are legitimate for your environment. 2) Ensure you have an HTTP client (curl or equivalent) and the 'openclaw' CLI available — the skill assumes these but doesn't declare them. 3) Back up ~/.openclaw/openclaw.json and be prepared that the skill will write botId/secret into that file and run 'openclaw gateway restart'. 4) If you need stricter control, ask the skill author to update metadata to declare required binaries and the config path, or run the flow manually (call generate, paste auth_url, then perform the polling and config write yourself) so you can review and approve the exact changes. If you cannot verify the endpoints or do not want automated writes/restarts, treat this as untrusted and perform the integration manually.
功能分析
Type: OpenClaw Skill
Name: mmxagent-skill-wecom
Version: 1.0.0
The skill facilitates a standard integration between OpenClaw and Enterprise WeChat (WeCom) using official API endpoints (work.weixin.qq.com). It follows a legitimate OAuth-like flow where it generates an authorization URL, polls for credentials after user confirmation, and updates the local configuration file (~/.openclaw/openclaw.json). While it performs sensitive actions like writing credentials and restarting the gateway, these behaviors are transparently documented and directly aligned with the skill's stated purpose.
能力评估
Purpose & Capability
The skill's name/description (connect WeCom) align with the runtime behavior (call generate → give user auth_url → poll → store botId/secret). However the manifest declares no required binaries or config paths while the instructions clearly expect network access, curl (or equivalent HTTP client), an 'openclaw' CLI, and write access to ~/.openclaw/openclaw.json. The omission in metadata is inconsistent with the actual capability.
Instruction Scope
SKILL.md prescribes concrete network calls to work.weixin.qq.com, extracting scode/auth_url, handing the auth_url to the user, polling for results, writing credentials into ~/.openclaw/openclaw.json, and running 'openclaw gateway restart'. These steps are within the advertised purpose but the instructions instruct modifying a user config file and restarting the gateway — operations with side effects that should have been declared and exposed to user consent. The file path and restart step are not listed in the skill's declared requirements.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so it does not download or install third-party code. That lowers installation risk. The runtime still expects local tools and network access, which are not installed by the skill.
Credentials
The skill does not request environment variables or external credentials in metadata, and it does not exfiltrate arbitrary env vars in the instructions. It will, however, obtain and store botId/secret from the WeCom flow into the user's OpenClaw config — this is proportional to the feature but is a sensitive write operation that the skill did not declare. No other unrelated credentials are requested.
Persistence & Privilege
always:false (good). The skill instructs writing persistent credentials into ~/.openclaw/openclaw.json and restarting the gateway, which grants it the ability to alter the agent's configuration and operational state. That behavior can be legitimate for an integration, but users should explicitly consent and be aware. The skill does not try to modify other skills or system-wide settings beyond its own config, per instructions.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mmxagent-skill-wecom - 安装完成后，直接呼叫该 Skill 的名称或使用
/mmxagent-skill-wecom触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of the WeCom connection skill.
- Provides a step-by-step flow for authorizing and binding OpenClaw to WeCom (企业微信).
- Supplies users with an authorization link (auth_url) to share in a WeCom chat for authentication.
- Waits for explicit user confirmation before polling for authorization result.
- On success, writes credentials to OpenClaw configuration and restarts the gateway.
- Includes clear user instructions and strict process controls to prevent unintended actions.
元数据
常见问题
mmxagent-skill-wecom 是什么？
连接企业微信。调用 generate 接口获取授权链接，用户把链接发到企业微信聊天里点开完成授权。用户提到连接企业微信、接入企微、绑定企微机器人、创建企微机器人、扫码绑定企微时使用。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 109 次。
如何安装 mmxagent-skill-wecom？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mmxagent-skill-wecom」即可一键安装，无需额外配置。
mmxagent-skill-wecom 是免费的吗？
是的，mmxagent-skill-wecom 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
mmxagent-skill-wecom 支持哪些平台？
mmxagent-skill-wecom 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 mmxagent-skill-wecom？
由 OreoAndYuumi（@oreoandyuumi）开发并维护，当前版本 v1.0.0。
推荐 Skills