微盛企微管家SCRM

当用户需要查询或管理微盛企微管家（企业微信） SCRM 中的客户信息、客户标签、客户群、营销素材、活码、群发、跟进记录、聊天记录、联系人、商机、汇报、抽奖、客户日程等相关业务能力时触发。即使用户未明确提到 SCRM、企微管家、开放接口或 API，也应在这些企业微信客户运营与管理场景下触发。

Key things to consider before installing: - The skill actually needs a personal APP KEY (SCRM_APP_KEY) to work, but the registry entry did not declare any required env vars — assume the skill will ask for and store your APP_KEY. Verify you trust the source before providing it. - The runbook tells the agent to run local Python scripts and to automatically execute an export command containing your APP_KEY (export SCRM_APP_KEY='...'). That means the skill will run shell commands and will persist the APP_KEY into your shell profile and into local cache files. Only proceed if you are comfortable with the skill modifying your shell profile and storing secrets on disk. - The code communicates with https://open.wshoto.com (the intended service) and includes domain whitelisting for document fetches, which is consistent, but you should review the code yourself or have a trusted reviewer do so to ensure there is no hidden exfiltration to other endpoints. - Recommended mitigations: install only from a trusted publisher; review scripts for any unexpected network endpoints or command execution; test in an isolated environment or VM first; do not provide highly-privileged account credentials unless necessary; consider manually setting APP_KEY in a controlled way rather than letting the skill persist it automatically; restrict file permissions on .cache and logs if you proceed. If you want, I can list the exact locations where secrets are read/written and point to the lines in the scripts that implement export_hint, set-app-key, and profile writes so you can inspect them more closely.

Type: OpenClaw Skill Name: wecom-weisheng-scrm Version: 1.0.3 The skill bundle is a legitimate integration for the WeCom Weisheng SCRM platform. It follows a well-structured design with clear operational boundaries, including a domain-restricted fetcher (scripts/raw_fetcher.py) limited to 'open.wshoto.com' and an identity management system (scripts/identity_manager.py) that enforces role-based access control at the agent level. While the tool includes a command to persist API keys by modifying shell profiles (scripts/scrm.py), this behavior is explicitly documented for user convenience rather than stealthy persistence. No evidence of data exfiltration, unauthorized remote execution, or malicious prompt injection was found.