dingtalk-channel-rules

Warn

Audited by Socket on Apr 30, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's purpose is coherent for a DingTalk channel guide, but it delegates all meaningful actions to an external `dws` CLI and forwards bot-scoped context into it. That is broader and riskier than a pure formatting/routing skill, especially because install provenance and exact data flows of `dws` are not established in the skill text. No clear evidence of malicious exfiltration is present, but the external-action and credential-forwarding footprint warrants caution.

Confidence: 74%Severity: 58%
Audit Metadata
Analyzed At
Apr 30, 2026, 12:46 AM
Package URL
pkg:socket/skills-sh/DingTalk-Real-AI%2Fdingtalk-openclaw-connector%2Fdingtalk-channel-rules%2F@2ead87e568dbbf3f40f8359b0c75038f3db54529