dingtalk-drive
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a 'Minimum DWS Execution Contract' that explicitly prohibits the agent from outputting, logging, or requesting sensitive credentials such as tokens, appSecrets, or webhook tokens, ensuring they remain protected within the execution environment.
- [SAFE]: Robust path security is enforced for file operations; the instructions restrict file inputs to the current working directory and explicitly forbid the use of parent directory references ('..') to prevent path traversal attacks.
- [SAFE]: Destructive and high-impact operations, including file deletion, node movement, and permission changes, are gated by mandatory runtime confirmation requirements. The skill further requires the use of '--dry-run' for synchronization and bulk operations to allow for plan verification before execution.
- [SAFE]: The skill uses structured data (JSON format) for command outputs and enforces the use of unique, verifiable identifiers (dentryUuid/fileId) rather than potentially ambiguous names, reducing the risk of accidental or malicious misdirection during file management tasks.
Audit Metadata