dingtalk-agoal
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
dwscommand-line utility to interact with DingTalk's Agoal modules, including strategy decoding (strategy), contract management (contract), and performance scorecards (scorecard). These commands are scoped to the intended purpose of organizational goal management. - [INDIRECT_PROMPT_INJECTION]: The skill processes external business data such as goal details and report statistics. It mitigates potential injection risks by enforcing explicit safety rules: users must be shown a summary of proposed changes and must provide manual confirmation before any write or update operation is executed by the agent.
- [DATA_EXPOSURE]: The skill handles organizational performance data. Access is controlled through the
dwsbinary, which refers todws-sharedfor authentication and safety protocols, ensuring data is managed within the authorized DingTalk environment.
Audit Metadata