wecom-workplan-summary

What to check before installing: 1) Confirm the wecom_mcp helper is trusted and that you want it to access the named docid/sheet (wecom_mcp is the component that performs authenticated fetches). 2) Avoid pasting sensitive secrets into the clipboard input; pasted content is written to /tmp/workplan_paste.tsv (which may be readable by other processes/users on some systems). 3) Review the included scripts/summary.py (already inspected here) if you need to be certain of exact parsing/retention behavior; the script only parses dates/plans, aggregates by person, and formats structured output — it does not exfiltrate data to external endpoints. 4) If deploying in a shared environment, consider restricting filesystem permissions on /tmp or use a private temp location. If you want, I can produce a short checklist of changes to make the temp handling more private (e.g., use a secure temp file) or highlight any specific lines in the script for further review.