dingtalk-troubleshoot

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill directs users to install the dingtalk-workspace-cli tool via the npm package manager or by downloading an installation script from GitHub.
  • [REMOTE_CODE_EXECUTION]: Provides an installation command that fetches a shell script from the official DingTalk Open Platform GitHub repository (open-dingtalk) and pipes it to the shell. This is a common installation method for the official tool.
  • [COMMAND_EXECUTION]: The troubleshooting process involves executing various CLI commands such as dws auth login and dws recovery execute to manage connectivity and authorization.
  • [PROMPT_INJECTION]: The skill monitors command-line output for specific recovery event IDs to automate diagnostic steps. Ingestion points: stderr of dws commands (SKILL.md). Boundary markers: None identified. Capability inventory: Executing dws recovery commands based on output. Sanitization: Not explicitly defined. Mitigation: Use structured output and validate event IDs to ensure they conform to expected formats.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 12:46 AM