← 返回 Skills 市场
boge-net

WeCom CCUniverse Leo

作者 Boge · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
197
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install wecom-ccuniverse-leo
功能描述
文档与智能表格操作。当用户提到企业微信文档、创建文档、编辑文档、新建文档、写文档、智能表格时激活。支持文档创建/写入和智能表格的创建及子表/字段/记录写入。注意:所有文档创建和编辑请求都应使用此 skill,不要尝试用其他方式处理文档操作。
安全使用建议
This skill appears to implement WeCom document and smart-sheet operations and relies on an mcporter CLI — that part is coherent. Before installing: (1) Be cautious about the always:true flag: it forces the skill into every agent run; only install if you accept that persistent presence. (2) The skill will ask to run npm install -g mcporter (global install). Verify the mcporter package origin and review its source on npm/GitHub before approving a global install on a production or shared machine. (3) The skill reads ~/.openclaw/wecomConfig/config.json (undeclared in required config paths) to auto-configure the MCP server; inspect that file to ensure it doesn't contain secrets you don't want read. (4) Consider whether you want the agent to automatically proceed to perform installs/config changes after a single approval. If any of these are unacceptable, do not install or request a version that removes always:true and requires explicit user approval for installation and config changes. If you need more assurance, ask the skill author for the mcporter package repo and a justification for always:true and for reading the specified config path.
功能分析
Type: OpenClaw Skill Name: wecom-ccuniverse-leo Version: 1.0.0 The skill bundle provides a comprehensive interface for managing WeCom (Enterprise WeChat) documents and smart sheets via the `mcporter` MCP server. It includes detailed instructions for dependency management (installing `mcporter` via npm), environment-aware configuration (checking `OPENCLAW_SHELL` and reading local config files), and user-guided authorization using legitimate WeCom domains (work.weixin.qq.com). The logic is well-aligned with its stated purpose of automating document operations and does not exhibit any signs of malicious intent, unauthorized data exfiltration, or harmful prompt injection.
能力评估
Purpose & Capability
The skill's name/description (WeCom doc & smart sheet operations) aligns with the declared dependency on an mcporter CLI and the SKILL.md instructions to call an MCP server. However the skill declares always:true in metadata (force-enabled for every agent run) which is not justified by the described one-off document editing use-case and is disproportionate for a narrowly scoped integration.
Instruction Scope
Runtime instructions tell the agent to run shell commands (which is expected) and to read a local config file at ~/.openclaw/wecomConfig/config.json to obtain mcpConfig.doc.type and url. The config path is referenced directly but was not declared in the skill's required config paths. The skill also mandates automatic continuation (including automated npm global install) after user approval, increasing the scope of actions the agent may take on the host.
Install Mechanism
Install spec uses npm to globally install the mcporter package (npm install -g mcporter), which is a traceable public-registry install (moderate risk). No download from arbitrary URLs or archive extraction is used. Still, global npm installs alter the system environment and should be verified (package provenance, maintainer, and content).
Credentials
No environment variables or credentials are requested, which is appropriate. But the skill instructs reading a user-local config file (~/.openclaw/wecomConfig/config.json) that was not declared in required config paths; that file may contain sensitive runtime configuration. Accessing an undeclared config path is disproportionate unless the user understands and approves it.
Persistence & Privilege
The skill is marked always:true (force-included in every agent run). This gives it persistent presence across all agent activities and increases risk if the skill is compromised or buggy. There is no strong justification in the description for always-on behaviour for a focused document editing tool.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install wecom-ccuniverse-leo
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /wecom-ccuniverse-leo 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
**Initial release of WeCom Doc & Smart Sheet Skill:** - Provides document and smart sheet creation/editing for WeCom, exclusively via mcporter and MCP server. - Automatically handles all platform checks, installations, and configurations required for document actions. - Ensures only documents created by this skill can be edited; docid is managed internally and cannot be parsed from URLs. - Guides users through installation/configuration errors with original, unmodified prompts and handles specific error codes. - Supports complex smart sheet workflows: sub-tables, fields, and records operations according to strict schema. - Includes comprehensive field type and value mapping, with key focus on data format correctness.
元数据
Slug wecom-ccuniverse-leo
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

WeCom CCUniverse Leo 是什么?

文档与智能表格操作。当用户提到企业微信文档、创建文档、编辑文档、新建文档、写文档、智能表格时激活。支持文档创建/写入和智能表格的创建及子表/字段/记录写入。注意:所有文档创建和编辑请求都应使用此 skill,不要尝试用其他方式处理文档操作。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 197 次。

如何安装 WeCom CCUniverse Leo?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install wecom-ccuniverse-leo」即可一键安装,无需额外配置。

WeCom CCUniverse Leo 是免费的吗?

是的,WeCom CCUniverse Leo 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

WeCom CCUniverse Leo 支持哪些平台?

WeCom CCUniverse Leo 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 WeCom CCUniverse Leo?

由 Boge(@boge-net)开发并维护,当前版本 v1.0.0。

💬 留言讨论