The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes several Python scripts (calendar_free_slot_finder.py, calendar_schedule_meeting.py, and calendar_today_agenda.py) that execute the 'dws' CLI tool via the subprocess.run method. This is the intended design for interacting with the DingTalk platform tools and is implemented safely by passing arguments as a list, which prevents shell injection vulnerabilities.
[INDIRECT_PROMPT_INJECTION]: The skill is subject to an indirect prompt injection surface because it processes external data from calendar events and possesses significant write/delete capabilities. 1. Ingestion points: Data is ingested from external calendar records through the output of 'dws calendar event list', 'busy search', and 'room search' commands. 2. Boundary markers: The skill does not implement explicit boundary markers or 'ignore instructions' delimiters for content retrieved from external calendar event summaries or descriptions. 3. Capability inventory: The skill has the authority to create, modify, and delete calendar events, manage attendees, and reserve or release meeting rooms. 4. Sanitization: The provided scripts extract structured JSON data but do not perform additional validation or sanitization on the text content of calendar entries before they are used in the agent's logic.

dingtalk-calendar