The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses a Python script (scripts/doc_create_and_write.py) to wrap the dws CLI tool. This is performed securely using subprocess.run with a list of arguments, which prevents shell injection vulnerabilities.
[SAFE]: The skill's behavior is consistent with its intended purpose of document management. It includes explicit protocols for safety, such as requiring user confirmation for irreversible operations like document or comment deletion.
[SAFE]: No obfuscation, data exfiltration patterns, or hardcoded credentials were found. All external resource references (URLs and package patterns) are aligned with the official vendor's (DingTalk-Real-AI) infrastructure.

dingtalk-doc