wechat-group-qa/

PassAudited by ClawScan on May 1, 2026.

Overview

The skill matches its stated purpose, but it reads enterprise WeChat group messages and stores a persistent question table, so access and retention should be managed.

This skill appears purpose-aligned and has no code or install-time behavior in the provided artifacts. Before using it, make sure group members know that @mentions may be recorded, limit the bot to the right WeChat groups, and control who can access or retain `wechat-qa-records.md`.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Messages that mention the bot may be automatically processed and recorded.

Why it was flagged

The skill is intended to act automatically when mentioned in a group. This is disclosed and aligned with the stated purpose, but users should understand that recording can happen without a separate confirmation step.

Skill content
当企业微信群里有@机器人的消息时,技能自动触发。
Recommendation

Use the bot only in groups where participants understand that @mentions may be collected and organized.

What this means

If connected to a WeChat/WeCom bot or chat integration, the skill may see group messages needed to extract questions.

Why it was flagged

The skill requires access to enterprise WeChat group messages. That access is expected for the purpose, but it is still workplace/group-chat data.

Skill content
从企业微信群消息中提取学员提问
Recommendation

Limit the bot’s permissions and membership to the intended course groups.

What this means

Student questions and identifying details may remain in a file and be reused or exposed if the file is shared or kept too long.

Why it was flagged

The skill persists extracted group-chat records to a Markdown file, including fields such as student nickname, question content, time, and course stage.

Skill content
问题记录保存在 `wechat-qa-records.md` 文件中,每次更新表格。
Recommendation

Store the records in a controlled location, define a retention policy, and avoid collecting unnecessary personal information.