dingtalk-troubleshoot
Warn
Audited by Snyk on Apr 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill instructs users at runtime to run a curl piped to sh that fetches and executes remote code—https://github.com/open-dingtalk/dingtalk-workspace-cli/releases/latest/download/install.sh—used as the recommended fix when dws is missing, so it is a runtime-executed external dependency.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata