dingtalk-feishu-cn

• Analyzed: May 12, 2026, 4:21 AM
• Findings: 1
• Version: 1.0.0
• Hash: b5217a45015a799b1278e93557a3eb274c24b496a42ae98cfe8d20d0368ab4e6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle appears benign. It provides documentation and code examples for integrating with DingTalk and Feishu, which are legitimate enterprise communication platforms. The `SKILL.md` file contains standard `curl` commands for sending messages to webhooks and Python snippets for using official SDKs, all requiring user-provided tokens/keys. There is no evidence of prompt injection attempts, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. The '注意事项' section even includes a security warning about not leaking webhook addresses.