What is wecom-unified?

A command-line skill for WeCom, Tencent's workplace communication and collaboration platform. It covers contacts, documents, tables, calendars, meetings, tasks, files, email, messages and media.

Use it to find contacts, search and manage documents, work with online tables, schedule events, handle meetings and tasks, and manage messages or files.

It avoids managing separate workplace operations manually across WeCom's many services.

wecom-unified — Skill for Claude Code by chuancyzhang/deepseek-cowork

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add chuancyzhang/deepseek-cowork --skill wecom-unified

Clone the repo

git clone --depth 1 https://github.com/chuancyzhang/deepseek-cowork

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/chuancyzhang/deepseek-cowork/wecom-unified/github.svg)](https://agentmods.dev/skills/chuancyzhang/deepseek-cowork/wecom-unified)

Your own site

<a href="https://agentmods.dev/skills/chuancyzhang/deepseek-cowork/wecom-unified"><img src="https://agentmods.dev/badge/skills/chuancyzhang/deepseek-cowork/wecom-unified/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/chuancyzhang/deepseek-cowork/wecom-unified"><img src="https://agentmods.dev/badge/skills/chuancyzhang/deepseek-cowork/wecom-unified.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 367 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 3,479 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin 95% copy Near-identical to another mod in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00367	$0.03479
Opus 5.5	$0.00147	$0.01392
Sonnet 5.5	$0.00073	$0.00696
Haiku 4.5	$0.00037	$0.00348

Measured 1mo ago against content hash e3a10ffef6b1, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

wecom-unified scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

The scan reads SKILL.md. This mod also ships 1 executable file (impl.py), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

95% identical to wecom-unified — 53 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

ai_skills/wecom-unified/SKILL.md · 119 lines

How it starts

The opening of the file, as written. The whole thing — 119 lines — stays where its author put it; the contents beside it link to each section on GitHub.

企业微信套件 (WeCom Unified)

企业微信 CLI (wecom-cli) 全能套件，通过命令行工具与企业微信系统交互。下方「业务域概览」是路由表：判断用户意图属于哪个业务域，然后读取该域对应的 reference 文件，再按其中的参数规范构造命令。严禁凭路由表描述或自身记忆猜测拼参数。

⚠️ 前置检查 — 使用任何命令前必须执行

Cowork 固定提供并校验 wecom-cli 1.1.0，凭据由能力商店隔离管理。禁止执行 npm 安装、查找系统 PATH 中的 CLI、切换到全局 CLI，或在对话中运行任何 auth 命令。

先调用 wecom_reference_read 读取相关业务域入口；入口引用子文档时再按需读取，禁止猜测命令参数。
业务操作只通过 wecom_cli 传入参数数组，不经过 shell。
工具返回未授权、需要重新授权或 CLI 不可用时，停止业务操作并引导用户前往「能力商店 → 企业微信办公套件」扫码连接或修复安装。
auth show --status 只代表本机存在凭据，不代表服务端权限健康；真实连接验证由能力商店统一执行。

获取个人身份

如果操作流程必须获取机器人或授权人身份（姓名、userid等），需要调用 wecom-cli identity whoami 获取。

通用输出约束：ID 类字段禁止外露

本约束对所有 wecomcli-* 技能生效，优先级高于各业务技能的输出格式，且不因用户主动索要而放宽。

禁止：你的最终回复禁止出现 userid / open_vid / department_id / chat_id 等 ID 标识。凡是接口返回的内部标识（含 mail_id / media_id / file_id / space_id / folder_id / docid / content_id / msg_id / cursor / next_cursor 等，命名上以 _id 结尾或语义上属于机器标识的字段一律视为 ID）都只能在内部流转，用于后续接口调用。
必须：你的思考过程和最终回复必须使用可读名称，如 name / username / external_username / 部门名 / 邮箱 / subject / doc_name / chat_name / title 等 tool_result 返回的内容。
接口只返回 ID 而没有可读名称时，先读取对应业务域的 reference 文件（如解析人员见 references/wecomcli-contact.md）换取可读名称；确实无法换取时，用自然语言描述该对象（如「上一封日报邮件」「你刚上传的那个文件」）来指代，禁止退化为展示 ID。
需要用户在多个候选中选择时，用序号 + 可读信息（名称 / 主题 / 时间 / 路径等）构造候选列表，禁止用 ID 作为区分依据让用户辨认。
用户直接要求「把 ID 给我」「打印 mail_id」时，说明该标识属于内部字段不便提供，并改用可读信息或继续帮其完成实际操作。
可读链接（如文档 doc_url、微盘分享链接）不属于本约束限制范围，可按各业务技能规定正常展示，即使链接本身包含标识字符串。

业务域概览

👤 通讯录 (contact)

按姓名、拼音、英文名或别名批量模糊搜索通讯录人员，供查找联系人、区分同名人员、列出全部同名人员，以及为其他业务域把人名解析成内部人员标识。搜索结果含姓名、英文名 / 别名、邮箱、管理职务和部门路径。

→ 详见 references/wecomcli-contact.md

📄 文档 (doc)

/doc/ 在线文档（doc / docx / Word / Office 文档）的新建、导入、读取、末尾追加与全量覆盖。仅当用户明确指定 doc 类文档，或给出 https://doc.weixin.qq.com/doc/xxx 链接时走这里；新建统一采用「生成 .docx → 导入」流程。未指定品类的「创建 / 写 / 整理成文档」默认走智能文档；搜索、改名、加成员或改权限走文档公共管理。

→ 详见 references/wecomcli-doc.md

Read the full file on GitHub · 119 lines

Files

What ships with it

60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

1mo ago First seen · 119 lines · 367 tokens per session scan A e3a10ffef6b1

Subscribe to this mod's changes

wecom-unified is a skill published in the GitHub repository chuancyzhang/deepseek-cowork (18 stars, last pushed today), licensed Apache-2.0. It adds 367 tokens to every session and 3,479 once invoked, about $0.0015 per session on Opus 5.5. A static security scan graded it A with 0 findings. It is 95% identical to wecom-unified, differing in 53 lines, and is treated as a copy.

Documents Project management

wecom-unified