Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add sunnoy/openclaw-plugin-wecom --skill wecom-doc-managergit clone --depth 1 https://github.com/sunnoy/openclaw-plugin-wecomWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sunnoy/openclaw-plugin-wecom/wecom-doc-manager)<a href="https://agentmods.dev/skills/sunnoy/openclaw-plugin-wecom/wecom-doc-manager"><img src="https://agentmods.dev/badge/skills/sunnoy/openclaw-plugin-wecom/wecom-doc-manager.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00124 | $0.01934 |
| Opus 5 | $0.00062 | $0.00967 |
| Sonnet 5 | $0.00025 | $0.00387 |
| Haiku 4.5 | $0.00012 | $0.00193 |
Grade A, and why
wecom-doc-manager scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 107 lines — stays where its author put it; the contents beside it link to each section on GitHub.
企业微信文档管理
wecom_mcp是一个 MCP tool,所有操作通过调用该 tool 完成。
⚠️ 前置条件:仅在当前会话第一次准备调用
wecom_mcp、且尚未确认工具可用时,按wecom-preflight技能执行前置条件检查。若当前回合工具列表里已经有wecom_mcp,或当前会话里刚刚成功调用过wecom_mcp,则不要重复读取wecom-preflight。
⚠️ 路径与停止规则:
- 如果要读取本 skill,必须直接使用
<available_skills>或skillsSnapshot中给出的精确绝对路径。- 不要猜测或改写为
/data/openclaw/skills/wecom-*、/workspace/.openclaw/skills/...、/root/.openclaw/workspace-*/.openclaw/skills/...,也不要用exec+ls/find探路。- 若
wecom_mcp返回errcode: 846609或unsupported mcp biz type,表示当前 bot 未开通该 category,不是路径、白名单或 sandbox 问题;立即停止继续read、list、find、memory fallback 探索,直接告知用户对应 category 未开通。- 在读取文档前,先调用
wecom_mcp执行list+category=doc探测当前 bot 实际暴露的 doc 工具列表。只有当列表里确实存在get_doc_content时,才允许继续调用它。- 如果
list doc的结果中不存在get_doc_content,说明当前 bot 的 doc 类 MCP 仅开放了创建/编辑能力,没有开放读取能力。此时必须立即停止,直接告诉用户“当前文档读取能力未开通”;不要再继续尝试get_doc_content、浏览器抓页面、read/find/exec 探路或 HTML fallback。
管理企业微信文档的创建、读取和编辑。所有接口支持通过 docid 或 url 二选一定位文档。
调用方式
通过 wecom_mcp tool 调用,品类为 doc:
使用 wecom_mcp tool 调用 wecom_mcp call doc <tool_name> '<json_params>' 调用指定技能
返回格式说明
所有接口返回 JSON 对象,包含以下公共字段:
| 字段 | 类型 | 说明 |
|---|---|---|
errcode |
integer | 返回码,0 表示成功,非 0 表示失败 |
errmsg |
string | 错误信息,成功时为 "ok" |
当 errcode 不为 0 时,说明接口调用失败,可重试 1 次;若仍失败,将 errcode 和 errmsg 展示给用户。
get_doc_content
仅当 wecom_mcp list doc 的结果中明确包含 get_doc_content 时,才可以使用本接口。
获取文档完整内容数据,只能以 Markdown 格式返回。采用异步轮询机制:首次调用无需传 task_id,接口返回 task_id;若 task_done 为 false,需携带该 task_id 再次调用,直到 task_done 为 true 时返回完整内容。
- 首次调用(不传 task_id):使用
wecom_mcptool 调用wecom_mcp call doc get_doc_content '{"docid": "DOCID", "type": 2}' - 轮询(携带上次返回的 task_id):使用
wecom_mcptool 调用wecom_mcp call doc get_doc_content '{"docid": "DOCID", "type": 2, "task_id": "xxx"}' - 或通过 URL:使用
wecom_mcptool 调用wecom_mcp call doc get_doc_content '{"url": "https://doc.weixin.qq.com/doc/xxx", "type": 2}'
参见 API 详情。
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 107 lines · 124 tokens per session scan A d1c090436bb3
wecom-doc-manager is a skill published in the GitHub repository sunnoy/openclaw-plugin-wecom (705 stars, last pushed 3mo ago), licensed ISC. It adds 124 tokens to every session and 1,934 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
save-as-pdf
Reformat the current HTML design into a paginated, paper-ready PDF. The "Instant" export already gives the user a PDF at the design's native pixel size — this path is for when they want real pages.
export-as-pptx-editable
Native text & shapes — editable in PowerPoint.
skill-creator
Create or update AgentSkills. Use when designing, structuring, or packaging skills with scripts, references, and assets.
export-as-pptx-screenshots
Flat images — pixel-perfect but not editable.
update-setup
A one-time setup wizard for creating a personalised upgrade skill in a nanobot agent workspace. It checks whether an upgrade skill already exists and gathers version and installation details.
tmux
Remote-control tmux sessions for interactive CLIs by sending keystrokes and scraping pane output.