dingtalk-minutes
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the
dwsCLI installation script from theDingTalk-Real-AIrepository on GitHub. This download is a documented part of the setup process for the official tool being integrated.- [REMOTE_CODE_EXECUTION]: The setup instructions include executing the downloadedinstall.shscript to install the workspace CLI. This is a standard installation procedure for the service being wrapped by the skill.- [COMMAND_EXECUTION]: The skill includes a command to update the user's shell profile (~/.zshrc) by appending the path to the~/.local/bindirectory. This is a standard environment configuration step for CLI tools and is explicitly described to the user. Additionally, Python scripts call thedwsbinary usingsubprocesswith list-based arguments, which is a secure practice.- [PROMPT_INJECTION]: The skill ingests meeting transcripts and AI-generated summaries into the agent's context. While this data comes from an external source (DingTalk), the skill primarily handles data retrieval and local storage, minimizing the risk of automated instruction execution from within the transcripts.
Audit Metadata