reason-machines/devtools-skills224 installs
dingtalk-workspace-cli
A reusable agent skill published by reason-machines/devtools-skills.
How do I install this agent skill?
npx skills add https://github.com/reason-machines/devtools-skills --skill dingtalk-workspace-cliIs this agent skill safe to install?
- Gen Agent Trust Hubfail
This skill provides a CLI for managing DingTalk workspace data. It downloads installation scripts from a well-known service provider (DingTalk/Alibaba). While these sources are legitimate, the skill exposes an attack surface for indirect prompt injection because the agent processes organizational data from documents, chat messages, and tables, which could contain instructions to trigger destructive actions such as deleting records or sending unauthorized messages.
- Socketpass
No alerts
- Snykfail
Risk: CRITICAL · 3 issues
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/reason-machines/devtools-skills/dingtalk-workspace-cli">View dingtalk-workspace-cli on skillZs</a>