dingtalk-ai-table
Warn
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions provide shell command templates using
curl,grep, andcutto automate token retrieval and user identity conversion. - [CREDENTIALS_UNSAFE]: Instructions direct the agent to persist sensitive information, including the
DINGTALK_APP_SECRETand access tokens, in a plain-text configuration file at~/.dingtalk-skills/config. - [DATA_EXFILTRATION]: The skill requires the transmission of sensitive application credentials and internal identifiers to official DingTalk API domains for service interaction.
- [PROMPT_INJECTION]: The skill ingests data from table records via the
records/listendpoint (SKILL.md) and possesses command execution capabilities (curl), with no boundary markers or sanitization logic defined, creating a surface for indirect prompt injection.
Audit Metadata