Dingtalk Calendar

This skill is coherent for managing DingTalk calendars using the mcporter CLI, but take these precautions before installing/using it: - Only install mcporter from a trusted source (verify the npm package and its maintainer) and run the installation yourself rather than running arbitrary install commands you don't understand. - The skill requires you to paste Streamable HTTP URLs for DingTalk MCP services; treat those URLs as potentially sensitive (they allow the mcporter client to call your org's MCP endpoints) and only provide them if you trust the endpoint and operator. - Because the skill relies on an external CLI (mcporter), review mcporter's documentation for what it stores locally (configs, tokens) and its network behavior. - Note the minor inconsistency: package.json lists mcporter as a dependency even though the skill has no automated install; this is likely a packaging omission, not malicious, but verify before granting access to production accounts. If you want a stricter review, provide the mcporter package source (or its code) so its network/storage behavior can be inspected — that information would change the assessment if it showed unexpected exfiltration or wide local credential access.