dingtalk-minutes

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The raw.githubusercontent.com URL points to a direct install.sh (an executable shell script) and the GitHub repo is from an unverified username; downloading and running scripts from such sources without verifying the repository/signatures is a high-risk vector for malware or supply‑chain compromise.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 运行时通过 dws minutes list mine/shared/all --format json 与后续 dws minutes +detail/get ... --id <taskUuid> 拉取听记内容（如逐字稿 transcription、AI 摘要 summary、待办 todos）并在本地解析/落盘，这些“听记内容/标题/字段”可由外部用户在其钉钉账号内生成或投递，因此属于可被他人提交的免费文本进入读取工作流。