dingtalk-chat

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Python scripts such as bot_broadcast.py, chat_export_messages.py, and chat_history_with_user.py use the subprocess.run method to invoke the platform's dws CLI tool. This is the intended mechanism for the skill to perform chat operations. The scripts use list-based argument passing, which is a secure practice that prevents shell injection.
  • [SAFE]: The skill facilitates legitimate chat management tasks, including message sending, group administration, and history retrieval. All external operations are routed through the authorized dws binary, and no evidence of data exfiltration, credential harvesting, or malicious obfuscation was found in the provided instructions or scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 07:07 PM
Security Audit — agent-trust-hub — dingtalk-chat