dingtalk-channel-rules
Warn
Audited by Socket on Apr 30, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's purpose is coherent for a DingTalk channel guide, but it delegates all meaningful actions to an external `dws` CLI and forwards bot-scoped context into it. That is broader and riskier than a pure formatting/routing skill, especially because install provenance and exact data flows of `dws` are not established in the skill text. No clear evidence of malicious exfiltration is present, but the external-action and credential-forwarding footprint warrants caution.
Confidence: 74%Severity: 58%
Audit Metadata