Dingtalk Calendar
ReviewAudited by ClawScan on May 10, 2026.
Overview
This is a disclosed DingTalk calendar helper, but after setup it can change your calendar and access scheduling/contact data through DingTalk MCP services.
This skill appears coherent and purpose-aligned. Before installing, make sure you trust the mcporter package and only configure official DingTalk MCP URLs. Treat it as capable of acting on your DingTalk calendar: review event IDs, attendees, times, and meeting-room choices before letting the agent create, update, or delete anything.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Once configured, the agent may be able to create, modify, or delete DingTalk events and view coworker busy-status/contact information allowed by the connected account.
The skill explicitly uses DingTalk account authority to manage calendar data and access organization scheduling/contact information.
支持日程创建、查询、更新、删除 ... 支持查询他人闲忙状态 ... 支持通讯录用户搜索和详情查询
Use the skill only with the intended DingTalk account and least-privilege MCP access; review and confirm any create, update, delete, or room-booking action.
A mistaken or over-broad command could change or remove calendar entries or reserve rooms unintentionally.
The documented CLI can perform high-impact mutations such as deleting calendar events; this is purpose-aligned but should be user-directed.
mcporter call dingtalk-calendar delete_calendar_event --args '{"eventId": "日程ID"}' --output jsonBefore allowing the agent to run mutating commands, verify the event ID, time range, attendees, and meeting room, and ask for confirmation for deletes or updates.
The security of actual execution depends on the installed mcporter package and the configured DingTalk MCP services, not just this instruction file.
The skill depends on a globally installed external CLI whose implementation is not included in the provided artifacts; this is central to the stated purpose but should be installed from a trusted source.
npm install -g mcporter # 或使用 bun 安装 bun install -g mcporter
Install mcporter from a trusted registry, consider pinning a known-good version, and verify the package before using it with DingTalk account access.
If a user configures the wrong or untrusted MCP URL, calendar/contact queries and mutations could be sent to an unintended service.
The skill routes calendar and contact operations through user-configured MCP service URLs; this is expected, but the URL origin determines where requests go.
mcporter config add dingtalk-calendar --url "这里粘贴钉钉日历的URL"
Only copy MCP URLs from the official DingTalk MCP site and avoid using URLs supplied by untrusted chats, documents, or third parties.