dingtalk-message

Pass

Audited by Gen Agent Trust Hub on Mar 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses create_file to generate bash scripts in /tmp/ which are executed to process API logic. It utilizes standard shell utilities like grep, sed, and cut to manage a local configuration file at ~/.dingtalk-skills/config for persistent storage of tokens and settings.- [EXTERNAL_DOWNLOADS]: Performs network operations using curl to interact with official DingTalk API endpoints (api.dingtalk.com and oapi.dingtalk.com) for authentication and message delivery. These operations are essential for the skill's primary function and target a well-known service.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 26, 2026, 08:49 AM