ClawHub
Back to skill

Security audit

dingtalk-log

Security checks for vulnerabilities and agentic risk

Overview

This is a documentation-only skill for querying DingTalk employee log reports, with sensitive data access that is disclosed and aligned with its stated purpose.

Install or use this only if you are authorized to access DingTalk employee reports for the relevant organization. Prefer narrow user, template, and time filters, handle returned report contents as sensitive business or personal data, and avoid storing access tokens or report results longer than necessary.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill is designed to retrieve employee log data, including creator identity, timestamps, template names, and content fields, which can contain sensitive business or personal information. The absence of any warning, consent guidance, or least-privilege notice increases the risk that users invoke broad enterprise log access without understanding the sensitivity or compliance implications.

External Transmission

Medium
Category
Data Exfiltration
Content
## 前置条件
1. 应用权限：仅支持**企业内部应用/第三方企业应用**调用，需提前为应用申请「查询企业员工日志权限」；第三方个人应用不支持。
2. AccessToken准备：调用接口前必须先获取对应应用的access_token：
   - 接口地址：`https://api.dingtalk.com/v1.0/oauth2/accessToken`
   - 请求方式：POST
   - 请求体参数：
     | 名称      | 类型   | 必填 | 说明                     |
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Static analysis

No suspicious patterns detected.