daily-ai-agent-aigc-top-news-dingtalk

Warn

Audited by Socket on May 9, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill is largely coherent with its stated purpose and routes output to expected DingTalk destinations, so it is not fundamentally incompatible or overtly malicious. Risk comes from indirect trust in the dws CLI, transitive dependence on another skill's archive script, and prompt-injection exposure from broad web/news ingestion combined with command/write capabilities.

Confidence: 84%Severity: 52%
Audit Metadata
Analyzed At
May 9, 2026, 07:14 PM
Package URL
pkg:socket/skills-sh/dracohu2025-cloud%2Fdraco-skills-collection%2Fdaily-ai-agent-aigc-top-news-dingtalk%2F@f3624d6e853043ca907361a15d3d668552cfb17c