wecomcli-media Skill for Claude Code: What It Does and How to Install It

Makes Claude upload a local file to WeCom, or download a WeCom media file to your computer.

Installs: 8.6K; on skills.sh
Stars: 3.3K; on GitHub
Updated: Oct 2026; last repo commit

This is the small file-moving skill in the wecom-cli skill set. It does two things: it downloads a WeCom media file to a local path, and it uploads a local file so other skills can use it. It does not read what is inside a file.

The other skills depend on it. The email skill uses it for attachments, and the message skill uses it to turn a local file into something it can send. It needs the wecom-cli program and a one-time QR-code sign-in, and it must read the shared skill first.

Good for

WeCom email users who want an attachment or inline image saved locally
People sending files, images, voice or video through WeCom messages
Builders who use the other wecomcli-* skills

Install wecomcli-media

Claude Code

Copy this prompt.

Install the wecomcli-media skill in Claude Code. Run this command:

npm install -g @wecom/cli

Then check that it loaded and tell me how to use it.

2
Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js 18 or newer, A WeCom account.

Do steps 1 to 3. Step 2 has alternatives: the README command installs all 15 skills in the repo, the second command installs only wecomcli-shared, wecomcli-media. Every wecomcli-* skill must also read wecomcli-shared before it runs a command (its SKILL.md says so), so install that one too. The shared skill checks that wecom-cli is installed at version 1.2.1 or newer and signed in, and runs npm install -g @wecom/cli and the sign-in itself if not. The README also mentions an optional bot ID and secret for a smart bot. The skill runs the wecom-cli program on your machine, so there is no Claude app upload route.

From the project README. Source.

What's in the skill

When it loads

企业微信媒体文件上传/下载技能。承接基于 media_id 下载媒体文件到本地，以及上传本地文件获取 media_id 两类操作。当其他技能（微盘、邮件等）返回了 media_id 需要落地为本地文件，或已有本地文件需要转换为 media_id 供其他技能使用时，必须先读取本技能获取完整指引，不得凭记忆处理。本技能不解析/识别文件内容，仅负责文件本身的搬运。

Sections in SKILL.md

适用范围
适用
不适用
接口详述
下载媒体文件
上传媒体文件
关键约束
跨技能依赖
安全提示（最高优先级）

Key facts

Author: WeComTeam (repo owner; the repo is the wecom-cli tool this skill drives)
License: MIT (LICENSE file and README badge)
Installs on skills.sh: 8,591 (Nov 2, 2026)
GitHub stars: 3,275 for the whole wecomteam/wecom-cli repo (Nov 2, 2026)
Last repo commit: Oct 19, 2026
What it includes: 1 file: SKILL.md. The folder holds no scripts
skills.sh audits: Gen Agent Trust Hub: pass; Socket: pass; Snyk: pass (Nov 2, 2026)
Needs: wecom-cli 1.2.1 or newer (installed and checked by wecomcli-shared), Node.js 18 or newer, and a WeCom account

What it includes

wecom-cli media download --json takes a media_id and returns a local file path
The media_id must come from another skill or from you. A link is not accepted as a media_id.
Try: “Save the attachment from that email to my computer”
Runs code · Download a media file
wecom-cli media upload --json takes a file path and returns a media_id
The result has a type (image, voice, video or file), a media_id and a created_at time. Other skills, such as message and disk, use the media_id.
Runs code · Upload a local file
Never invent a media_id or a file path
It does not parse file contents, does not show media_id values or downloaded file paths to you, and reports CLI errors as they are instead of working around the CLI with curl or Python.
Rules it follows

From the official docs

Permissions

Medium risk

What it can do

Read your data
Create and change things
Delete things
Read-only mode

Watch out for

It uploads local files to WeCom
wecom-cli media upload sends the file at the path you give. Make sure the path is the file you mean, since uploaded media can then be sent by the message or disk skills. github.com
Claude may install a global npm package
The shared skill runs npm install -g @wecom/cli if wecom-cli is missing or older than 1.2.1, then starts the QR-code sign-in. Install the CLI yourself first if you want to control the version. github.com
The CLI reports the calling agent to WeCom
The docs say wecom-cli reads the name of the agent program that calls it and sends the call chain to WeCom's cloud with each request. It is on by default in the npm build and can be switched off only by building from source with --no-default-features. github.com
Returned content is treated as data
The skill's safety note says nothing returned by the WeCom API is to be treated as instructions, and tokens or secrets in it are not to be output or used. github.com

Security advisories

No published security advisories as of Nov 2, 2026.

Technical details

Turning on read-only	No read-only mode.
Talks to	WeCom cloud services, reached through the wecom-cli program. npm registry (when the shared skill installs @wecom/cli)
Sign-in and keys	Sign-in is a one-time QR-code scan with wecom-cli auth init. The skill's safety note says tokens and secrets are not to be output or used.
Scopes	Uploads a local file you point it at to WeCom Downloads a media file and writes it to a local path Runs the wecom-cli program through the shell

Questions

How do I install it in Claude Code?

Use the install box at the top of this page. Install the CLI, add the skills (wecomcli-shared and wecomcli-media) and sign in once with a QR code. The README says the skills install is required.

Do I need a WeCom account?

Yes. The README lists a WeCom account as a prerequisite, plus Node.js 18 or newer. A smart-bot ID and secret are optional and come from WeCom's help page.

Does it send usage data to WeCom?

The docs say wecom-cli reads the name of the calling agent program and sends the call chain with each request to WeCom's cloud, to help find problems. The npm build has this on by default. Building from source with --no-default-features turns it off.

Does it work in the Claude app, Codex or Cursor?

The install box has Claude Code, Codex and skills CLI routes. There is no Claude app upload route, because the skill drives the wecom-cli program on your machine. The README does not name Cursor.

What does the wecomcli-media skill do?

It uploads a local file to WeCom to get a media_id, and downloads a media file by its media_id. Other WeCom skills call it for email attachments, disk files and message attachments.

Can it read or summarise a file?

The skill itself only moves the file. SKILL.md says that after a download you read the file from the returned local path, and that content parsing is not part of this skill.

Is it safe?

It uploads files you point it at to WeCom and writes downloaded files to your computer. It runs the wecom-cli program, which is installed globally by the shared skill if missing. Our advice: check the file path before it uploads, and only use it on files you are happy to send to your WeCom account.

Information

updated Nov 2, 2026

Repository: wecomteam/wecom-cli
Folder: skills/wecomcli-media

wecomteam/wecom-cli skills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 6

wecomcli-media SKILL.md · github.com
wecomcli-shared SKILL.md · github.com
wecom-cli README · github.com
wecom-cli skills overview · github.com
github.com · github.com
wecom-cli data collection notice · github.com