dingtalk-drive
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the 'dws' command-line tool for all operations. The Python script
scripts/drive_tree_list.pyperforms directory listing usingsubprocess.runwith an argument list, which is a secure pattern that avoids shell injection. - [SAFE]: Destructive operations such as file deletion (
dws drive delete) and modifying public access (dws drive publish set) are correctly identified as requiring user confirmation, preventing unauthorized or accidental modifications. - [SAFE]: No sensitive data exposure, prompt injection patterns, or obfuscation techniques were detected in the skill instructions or scripts.
Audit Metadata