dingtalk-minutes

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the dws CLI installation script from the DingTalk-Real-AI repository on GitHub. This download is a documented part of the setup process for the official tool being integrated.- [REMOTE_CODE_EXECUTION]: The setup instructions include executing the downloaded install.sh script to install the workspace CLI. This is a standard installation procedure for the service being wrapped by the skill.- [COMMAND_EXECUTION]: The skill includes a command to update the user's shell profile (~/.zshrc) by appending the path to the ~/.local/bin directory. This is a standard environment configuration step for CLI tools and is explicitly described to the user. Additionally, Python scripts call the dws binary using subprocess with list-based arguments, which is a secure practice.- [PROMPT_INJECTION]: The skill ingests meeting transcripts and AI-generated summaries into the agent's context. While this data comes from an external source (DingTalk), the skill primarily handles data retrieval and local storage, minimizing the risk of automated instruction execution from within the transcripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 02:15 PM
Security Audit — agent-trust-hub — dingtalk-minutes