写入智能表格记录
v1.3.0当用户请求写入数据（添加新记录或更新已有记录）时，可以使用本技能向企业微信智能表格写入数据。本技能**强制先检查并主动向用户索要** Webhook 地址和该工作表的「示例数据」schema（若缺少则立即询问并保存），之后根据 schema 精确构建 JSON payload。内置 8 个复杂度递增的完整示例、日...
⭐ 0· 351·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the actual behaviour: the skill asks for a Webhook and schema, constructs payloads, and sends them to 企业微信智能表格. The only resource it requires is a per-table webhook and a local config file to store those webhooks — which is coherent with the stated purpose.
Instruction Scope
SKILL.md explicitly instructs the agent to read/write the local config at ~/.openclaw/workspace/config/smartsheet-tables.json, to ask the user for the webhook and example JSON, and to proactively offer to write when the user expresses a 'record' intent. These actions are within the declared purpose, but the proactive triggering behavior means the agent may initiate write flows whenever it detects relevant user intent (it does ask for confirmation before using a saved webhook the first time in a conversation).
Install Mechanism
No install spec; only an included Python helper script (scripts/send_record.py). No downloads from external URLs or obscure package installs. The script uses standard libraries (urllib, datetime).
Credentials
The skill requests no environment variables or external credentials. It stores user-provided webhooks (which act as the table write key) in a declared local config path — that is proportional to the feature and explicitly documented in SKILL.md.
Persistence & Privilege
always:false and no system-wide config changes. The skill persists user-provided webhook URLs and schemas to its own config path so it can reuse them later; combined with autonomous invocation (default platform behaviour), this enables the agent to perform future writes without the user re-entering the webhook. This is expected for convenience but is a privacy/safety consideration the user should be aware of.
Assessment
This skill appears to do what it says: it sends JSON payloads to 企业微信智能表格 webhooks you provide, and it saves those webhook URLs and schemas to ~/.openclaw/workspace/config/smartsheet-tables.json for reuse. Before installing or using it: 1) Treat each webhook URL as a secret/write-key — only provide webhooks you control and trust. 2) If you don't want persistent access, decline the prompt to save the webhook (the skill documents that option). 3) Be aware the agent will proactively suggest storing records and may, after confirmation, reuse saved webhooks in the same conversation; if you prefer stricter control, avoid saving webhooks or disable the skill. 4) You can inspect scripts/send_record.py locally (it uses only standard Python libs and posts directly to the provided webhook) to verify behaviour. If you want more assurance, test with a non-production/test webhook first.Like a lobster shell, security has layers — review code before you run it.
latestvk975z0bkvxqj7n988njwvd979182qfre
License
MIT-0
Free to use, modify, and redistribute. No attribution required.