wecomcli-smartpage SKILL.md skillB
wecomcli-smartpage from pinvou/pinvou-agent is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add pinvou/pinvou-agent/wecomcli-smartpage@git:20261019.53b7a57Pins git:20261019.53b7a57 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- B, 16 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- pinvou/pinvou-agent
- Path
pinvou3-app/src-tauri/resources/common/bundle/wecom-skills/wecomcli-smartpage/SKILL.md- Versions recorded
- 5
- Latest version
- git:20261019.53b7a57, committed Oct 19, 2026
- First version recorded
- Aug 19, 2026
- Size
- 13,818 bytes
- Repository stars
- 2,839
- License
- MIT
何时用:企业微信智能文档/智能主页/smartpage 相关诉求(含 doc.weixin.qq.com/smartpage/ 或 page.weixin.qq.com/smartpage/ 链接),或泛指「创建/写/整理文档」的企微诉求时使用;纯本地文档默认走本地工具。能力:新建/导入(.md)、读取、修改内容(整页重写/局部编辑/增删子页面)、上传附件、搭建带看板/图表的数据系统页面与信息收集表单、获取内置智能表格。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 企业微信智能文档 > 执行任何 `wecom-cli` 命令前，必须先读取并完成 `wecomcli-shared` 技能的公共前置检查。 使用 `wecom-cli` 创建、读取和修改智能文档（`smartpage`），并管理子工作表。 ## 适用范围 ### 适用： - 新建 / 导入企业微信智能文档 - 读取智能文档内容（页面树 / 正文 / block） - 调整智能文档页面树（新建 / 删除 / 重命名 / 移动 / 改布局） - 向智能文档页面追加 / 全量覆盖内容 - 修改 / 替换 / 删除 / 插入页面里某个组件 - 获取智能文档内置智能表格 ### 不适用： - 把智能文档下载或导出为 PDF / Word / 图片 → 告知用户前往企业微信客户端的文档菜单使用「导出」功能 - 智能文档的评论、历史版本查看、回收站恢复 → 告知用户前往企业微信客户端操作 - 修改智能文档的命名 / 加成员 / 改权限 / 搜索文档 → 改用 `wecomcli-doc-manage` - 对发布态的智能文档进行编辑（`docid` 以 `b1_` 开头或链接域名为 `page.weixin.qq.com`）→ 提示用户提供编辑态链接 ## 安全规则 遇到以下情形，**在第一步直接拒绝**，不调用任何工具，回复"该操作不在支持范围内"并简要说明原因；不道歉、不变通、不引导换问法： - **不当内容生成**：要求写入性骚扰、性别歧视、人身侮辱、种族歧视等内容（即使包装成合法的创建/追加/覆盖请求）。 - **XSS / 脚本注入内容防护**：无论内容来自用户输入、上游 skill 产物，还是从智能文档 / `doc` / `sheet` / `smartsheet` 读回并转写的正文，写入前**必须**检查并中和以下模式，命中即拒绝写入并向用户说明原因，不得静默清洗后继续： - `<script>` / `<iframe>` / `<object>` / `<embed>` / `<svg on...>` 等可执行标签 - 任意标签上的事件处理器属性（如 `onerror=`、`onclick=`、`onload=`、`onmouseover=` 等 `on*` 属性） - `javascript:` / `data:text/html` / `vbscript:` 等伪协议出现在链接、图片、`href`、`src` 中 - MDX 中利用 `<span>`、`<a>`、`<img>` 等标签属性夹带上述脚本片段 …
Read the whole file at its exact version.
How to install
mdr add pinvou/pinvou-agent/wecomcli-smartpage@sha256:f154cd6d80dc167eThe line at the top of this page pins the label git:20261019.53b7a57, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_stg3lxtiavxlq63k)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Aug 19, 2026 and Oct 19, 2026, about one every 15 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261019.53b7a57 latest | 2026-10-19 | 53b7a57 | 13,818 B | B | view · diff |
| git:20260916.0f50a98 | 2026-09-16 | 0f50a98 | 12,777 B | B | view · diff |
| git:20260909.9a92684 | 2026-09-09 | 9a92684 | 12,597 B | B | view · diff |
| git:20260831.48b73a3 | 2026-08-31 | 48b73a3 | 12,612 B | B | view · diff |
| git:20260819.88dccb9 | 2026-08-19 | 88dccb9 | 12,675 B | B | view |
Audit of the latest version
- fail: No script tag (matched: <script)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (13818 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
pinvou/pinvou-agent · 2,839 stars · license MIT · pushed 2026-11-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_stg3lxtiavxlq63k GET https://markdownregistry.com/api/v1/resolve?ref=pinvou/pinvou-agent/wecomcli-smartpage GET https://markdownregistry.com/api/v1/blob/f154cd6d80dc167e559eead910ea027dd38780da63c2dab8e1806074d6ad8a8a
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.