dingtalk-troubleshoot
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to install the
dingtalk-workspace-clitool via the npm package manager or by downloading an installation script from GitHub. - [REMOTE_CODE_EXECUTION]: Provides an installation command that fetches a shell script from the official DingTalk Open Platform GitHub repository (open-dingtalk) and pipes it to the shell. This is a common installation method for the official tool.
- [COMMAND_EXECUTION]: The troubleshooting process involves executing various CLI commands such as
dws auth loginanddws recovery executeto manage connectivity and authorization. - [PROMPT_INJECTION]: The skill monitors command-line output for specific recovery event IDs to automate diagnostic steps. Ingestion points: stderr of dws commands (SKILL.md). Boundary markers: None identified. Capability inventory: Executing dws recovery commands based on output. Sanitization: Not explicitly defined. Mitigation: Use structured output and validate event IDs to ensure they conform to expected formats.
Audit Metadata