dingtalk-chat
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Python scripts such as
bot_broadcast.py,chat_export_messages.py, andchat_history_with_user.pyuse thesubprocess.runmethod to invoke the platform'sdwsCLI tool. This is the intended mechanism for the skill to perform chat operations. The scripts use list-based argument passing, which is a secure practice that prevents shell injection. - [SAFE]: The skill facilitates legitimate chat management tasks, including message sending, group administration, and history retrieval. All external operations are routed through the authorized
dwsbinary, and no evidence of data exfiltration, credential harvesting, or malicious obfuscation was found in the provided instructions or scripts.
Audit Metadata