← 返回 Skills 市场
213
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install wecom-mcp-setup
功能描述
企业微信 MCP 配置指南。当用户需要"添加企业微信"、"配置企微"、"启用企微消息"、"设置企业微信集成"时触发。提供完整的 MCP Server 配置、权限白名单设置和 Gateway 重启指引。
安全使用建议
This is a legitimate, coherent setup guide for adding a WeCom MCP server to OpenClaw, but take these precautions before following it: 1) Treat the WECOM_* values as sensitive — do not commit mcporter.json into version control; store secrets in an encrypted store or OS secret manager if possible. 2) The guide runs the MCP server via 'npx -y wecom-mcp-server' which downloads and executes code from npm on demand — verify the package name, publisher, and ideally pin a specific version (e.g., [email protected]) or use a vetted release build (GitHub release or org-maintained artifact). 3) If you cannot verify the npm package, consider installing the server from a trusted source or running it in an isolated environment (container or restricted host). 4) After initial setup, rotate the application secret if it was exposed during testing. 5) If you want stronger guarantees, ask the skill author for the upstream package repository or an official vendor reference before using npx to run it.
功能分析
Type: OpenClaw Skill
Name: wecom-mcp-setup
Version: 1.0.0
The skill bundle provides a legitimate configuration guide for integrating Enterprise WeChat (WeCom) with OpenClaw via an MCP server. It contains standard instructions for modifying local configuration files (~/.openclaw/workspace/config/mcporter.json) and setting tool permissions using the 'openclaw' CLI. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found in SKILL.md or _meta.json.
能力评估
Purpose & Capability
Name/description (WeCom MCP configuration) match the instructions: editing OpenClaw mcporter.json, adding a wecom_mcp server, enabling tool whitelist, restarting Gateway, and validating. The steps and commands (openclaw, mcporter list, gateway restart) are coherent with the stated goal.
Instruction Scope
Instructions are narrowly scoped to MCP setup: edit ~/.openclaw/workspace/config/mcporter.json to add a wecom_mcp entry, set tools.alsoAllow if needed, restart gateway, and verify with mcporter list. They explicitly instruct placing WECOM_CORP_ID / WECOM_AGENT_ID / WECOM_SECRET in the config file (plaintext), which is expected for this task but carries the usual secret-management risks. No unrelated system-wide reads or exfiltration steps are present.
Install Mechanism
There is no formal install spec in the registry (instruction-only). The SKILL.md instructs running the server via 'npx -y wecom-mcp-server', which will fetch and execute a package from the npm registry at runtime. This is coherent for running a node-based MCP server, but it introduces moderate risk because npx downloads third-party code on demand (possible supply-chain/typosquatting risk). The skill does not suggest pinning a package version or verifying package provenance.
Credentials
The skill does not request additional environment variables or external credentials from the registry metadata. The credentials it instructs the admin to provide (Corp ID, Agent ID, Secret) are exactly what a WeCom integration needs; their placement in a local config file is proportionate but should be treated as sensitive data.
Persistence & Privilege
Skill is not always-enabled and is user-invocable. It is instruction-only and does not request persistent elevated privileges or modify other skills. The runtime actions (editing a local OpenClaw config and restarting the Gateway) are appropriate for configuring the integration.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install wecom-mcp-setup - 安装完成后，直接呼叫该 Skill 的名称或使用
/wecom-mcp-setup触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: 企业微信 MCP 配置指南
元数据
常见问题
WeCom MCP Setup 是什么？
企业微信 MCP 配置指南。当用户需要"添加企业微信"、"配置企微"、"启用企微消息"、"设置企业微信集成"时触发。提供完整的 MCP Server 配置、权限白名单设置和 Gateway 重启指引。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 213 次。
如何安装 WeCom MCP Setup？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install wecom-mcp-setup」即可一键安装，无需额外配置。
WeCom MCP Setup 是免费的吗？
是的，WeCom MCP Setup 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
WeCom MCP Setup 支持哪些平台？
WeCom MCP Setup 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 WeCom MCP Setup？
由 stliuexp（@stliuexp）开发并维护，当前版本 v1.0.0。
推荐 Skills