企业微信智能办公助手

• Risk level: Low
• Analyzed: Apr 17, 2026, 7:43 PM
• Findings: 0
• Version: 1.0.0

Overview

This is an orchestration/combo skill that aggregates WeCom-related data and renders a morning-brief card — its requests and behavior are internally consistent, but it relies on other WeCom/Feishu skills (and their credentials/permissions) which you should review before enabling automatic sends.

This skill is an orchestration layer and looks coherent, but it will call other wecom-* skills that actually access calendars, todos, and team spreadsheets. Before installing or scheduling auto-runs: (1) Inspect the referenced sub-skills (wecom-schedule, wecom-smartsheet-data, wecom-get-todo-*) to see what credentials and scopes they request; (2) Confirm which WeCom/Feishu account and chat/group the card will be sent to and that recipients are appropriate; (3) Verify what wecom-preflight does on first run and whether it stores tokens/config; (4) Prefer manual trigger until you confirm least-privilege credentials and delivery targets to avoid automatic exfiltration or accidental disclosure of sensitive internal data.