wecom-workplan-summary

团队工作计划周度/月度汇总分析。仅当用户**明确提供**了团队工作计划数据（粘贴内容或指向企微智能表格）并要求汇总/分析时触发。典型意图："这是团队工作计划，帮我看下上周/本周情况"、"我把数据复制过来了，分析一下"、"帮我从企微表格拉取工作计划汇总"。**不触发**：仅提到"周报"、"本周工作"等通用词但未提供...

What to check before installing: 1) Confirm the wecom_mcp helper is trusted and that you want it to access the named docid/sheet (wecom_mcp is the component that performs authenticated fetches). 2) Avoid pasting sensitive secrets into the clipboard input; pasted content is written to /tmp/workplan_paste.tsv (which may be readable by other processes/users on some systems). 3) Review the included scripts/summary.py (already inspected here) if you need to be certain of exact parsing/retention behavior; the script only parses dates/plans, aggregates by person, and formats structured output — it does not exfiltrate data to external endpoints. 4) If deploying in a shared environment, consider restricting filesystem permissions on /tmp or use a private temp location. If you want, I can produce a short checklist of changes to make the temp handling more private (e.g., use a secure temp file) or highlight any specific lines in the script for further review.

Type: OpenClaw Skill Name: wecom-workplan-summary Version: 0.1.2 The skill bundle is designed to aggregate and summarize team work plans from WeCom smartsheets or user-provided text. The Python script (scripts/summary.py) processes data by filtering dates and grouping tasks by team members, using a subprocess call to a legitimate WeCom MCP tool for data retrieval. The instructions in SKILL.md are well-defined, focusing on report formatting and logic without any signs of prompt injection, data exfiltration, or unauthorized command execution.