wecomcli-shared Skill (WeCom) for Claude Code: What It Does and How to Install It

Makes your agent check that the WeCom CLI is installed, recent enough and signed in before any other WeCom skill runs.

Installs: 8.7K; on skills.sh
Stars: 3.3K; on GitHub
Updated: Oct 2026; last repo commit

This is the shared first step for every wecomcli-* skill. Before the first wecom-cli command, the agent checks the CLI version (1.2.1 or newer), checks sign-in status, and starts QR-code authorization only if you are not signed in. It also sets one output rule for all WeCom skills: internal ID fields such as userid, chat_id and mail_id stay out of the final reply, and readable names are shown instead.

It handles no business request itself. The wecom-cli README lists 15 WeCom skills, and the others do the real work on contacts, calendar, meetings, to-dos, mail, drive, messages and documents. SKILL.md is written in Chinese.

Good for

WeCom (WeChat Work) users who want their agent to manage contacts, mail, calendar, docs or meetings
Teams installing the WeCom skills for several agents

Install wecomcli-shared

Claude Code

Copy this prompt.

Install the wecomcli-shared skill in Claude Code. Run this command:

npm install -g @wecom/cli
npx skills add WeComTeam/wecom-cli -y -g
wecom-cli auth init

Then check that it loaded and tell me how to use it.

2
Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js 18+, WeCom account.

Install the CLI first. wecomcli-shared is the setup check that the other 14 WeCom skills call, so it does nothing useful without them. The README's own command installs all 15. Sign in once by scanning a QR code with WeCom. Needs Node.js 18 or newer and a WeCom account.

From the project README. Source.

What's in the skill

When it loads

wecom-cli 业务技能的公共前置检查、获取机器人及授权真人身份，以及通用输出约束。任何 wecomcli-* 技能首次准备执行 wecom-cli 命令前，都必须同时读取本技能，检查 CLI 是否安装、版本是否不低于 1.2.1，以及企业微信凭证是否已授权；仅在缺失、版本过低或未授权时执行安装或初始化。本技能还定义所有技能通用的 ID 类字段禁止外露约束。本技能不处理具体业务请求。

Sections in SKILL.md

Step 1：检查 CLI 安装与版本
Step 2：检查授权状态
Step 3：初始化凭证（仅未授权时）
通用输出约束：ID 类字段禁止外露
执行规则
获取个人身份

Key facts

Author: WeCom (vendor's own repo, wecomteam/wecom-cli; package.json calls it the official CLI for WeCom)
License: MIT
Installs on skills.sh: 8,682 (Nov 2, 2026)
GitHub stars: 3,275 for the whole wecomteam/wecom-cli repo (Nov 2, 2026)
Last repo commit: Oct 19, 2026
What it includes: 1 file: SKILL.md
Audits on skills.sh: Gen Agent Trust Hub: pass, Socket: pass, Snyk: pass (Nov 2, 2026)
Needs: Node.js 18 or newer, the @wecom/cli package and a WeCom account
Part of: The 15 Agent Skills in wecom-cli, counted in docs/skills.md and in the repo tree

What it includes

Runs wecom-cli --version and needs 1.2.1 or newer
If the command is missing or too old, it runs the global npm install shown in the install box.
Runs code · Step 1: Check CLI install and version
Runs wecom-cli auth show --status and expects authorized
On an error or an unexpected output, SKILL.md says to stop and report it.
Runs code · Step 2: Check authorization
Runs wecom-cli auth init --noninteractive when unauthorized
Shows an authorization link and QR code and waits for you to scan with WeCom.
Runs code · Step 3: Initialize credentials
Keeps userid, chat_id, mail_id and other _id fields out of replies
Overrides the output format of the business skills. doc_url and share links are allowed.
Read · ID fields stay hidden
Shows names, subjects and times, and numbers candidates for you to pick from
If only an ID comes back, it asks the contact skill for a name first.
Readable names and candidate lists
Runs wecom-cli identity whoami for the bot or authorizing person
Used when a flow needs a name or userid internally.
Runs code · Identity lookup

From the official docs

Permissions

Medium risk

What it can do

Read your data
Create and change things
Delete things
Read-only mode

Watch out for

It can install a global npm package
If the CLI is missing or older than 1.2.1, SKILL.md runs npm install -g @wecom/cli. Install the CLI yourself first if you prefer to control versions. github.com
The CLI reports the calling agent's name
The wecom-cli data collection notice says the prebuilt npm version reads the name of the agent program calling it and sends that call chain to WeCom with service requests. To turn it off, the notice says to build from source with that feature disabled. github.com
Authorization gives the CLI access to your WeCom
Step 3 asks you to scan a QR code with WeCom, after which the business skills can act on contacts, mail, calendar and documents. Check what the other skills you install are allowed to do. github.com

Technical details

Turning on read-only	No read-only mode in this skill. It only does setup checks; the business skills decide what is changed.
Talks to	npm registry (@wecom/cli install). WeCom services (through wecom-cli)
Sign-in and keys	SKILL.md describes the QR-code authorization step. It does not say where the credentials are kept.
Scopes	Runs wecom-cli commands to check version and sign-in Can install or upgrade the @wecom/cli package globally with npm Starts WeCom QR-code authorization for your account

Questions

What does wecomcli-shared do?

It runs the setup checks every WeCom CLI skill depends on. It confirms wecom-cli is installed at version 1.2.1 or newer, confirms you are signed in, and sets the rule that internal IDs are not shown in replies.

How do I install it?

Use the install box at the top of this page. Install the wecom-cli program first, then the skills. The README's own command installs all 15 WeCom skills, which is the simplest route.

Can I use it on its own?

It does no business work alone. SKILL.md says it cannot replace a business skill and that contacts, documents, sheets, calendar, meetings, to-dos, mail, drive, messages and media requests need the matching wecomcli-* skill as well.

Is it official?

Yes. It lives in WeCom's own wecom-cli repo, and package.json describes @wecom/cli as the official CLI for WeCom.

Do I need a WeCom account?

Yes. The README lists a WeCom account as a prerequisite and Node.js 18 or newer. A smart-bot Bot ID and Secret are listed as optional.

Why won't it show me IDs?

SKILL.md bans ID fields such as userid, chat_id and mail_id in final replies, even when you ask, and asks for readable names instead. Links such as doc_url are still allowed.

Is it safe?

It may install a global npm package and starts a QR-code sign-in to your WeCom account. The CLI also reports the calling agent's name to WeCom by default. Read the permissions section before you install it.

Information

updated Nov 2, 2026

Repository: wecomteam/wecom-cli
Folder: skills/wecomcli-shared

wecomteam/wecom-cli skills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 4

wecom-cli README · github.com
wecom-cli skills.md · github.com
wecomcli-shared SKILL.md · github.com
wecom-cli data-collection.md · github.com