维表智联管理
ReviewAudited by ClawScan on May 11, 2026.
Overview
This is a disclosed Dimens project administration skill; it can use credentials and run impactful CLI changes, so users should confirm scope before writes.
Install or enable this skill only if you want the agent to help administer Dimens projects. Use least-privilege credentials, verify the `dimens-cli` installation, confirm team/project/resource IDs before writes, and require explicit approval for deletes, publishes, permission changes, API-key changes, moves, or bulk overwrites.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may help create, update, upload, publish, or otherwise change Dimens project resources if given the necessary access.
The skill directs the agent toward CLI execution for project reads and writes. This is central to the stated admin purpose and includes scope checks, but the commands can still mutate project resources.
项目内查询、创建、更新、上传、验证等操作优先推荐并执行 `dimens-cli` 命令；... 执行任何写操作前先确认认证、`teamId`、`projectId` 与资源归属。
Before allowing write actions, confirm the exact team, project, resource, and intended change; require explicit review for destructive, public-sharing, bulk, or permission-related actions.
Anyone or any agent process that can use the same CLI profile may be able to act with the logged-in user's Dimens permissions.
The documentation clearly states that login stores tokens locally and reuses them for later commands, giving the CLI persistent delegated authority for the user's Dimens account.
CLI 登录成功后会：1. 把 `token` 写入本地 profile 2. 如果返回了 `refreshToken`，也会一并写入本地 profile 3. 后续 `project/sheet/column/row/ai` 命令默认复用该登录态
Use a least-privilege API key or account, protect the local CLI profile, avoid sharing secrets in chat logs, and revoke or rotate credentials when the task is complete.
The safety of actual execution depends partly on which `dimens-cli` binary is installed in the user's environment.
The skill depends on an external CLI as the main execution path, but the registry metadata says there are no required binaries and there is no install spec, so the CLI's source and installation are outside the reviewed artifacts.
项目内查询、创建、更新、上传、验证等操作优先推荐并执行 `dimens-cli` 命令
Install `dimens-cli` only from the official Dimens/BintelAI source, verify its version, and avoid running commands through an untrusted or shadowed binary on PATH.