钉钉快速集成配置

• Outcome: Review
• Latest audit: May 29, 2026, 9:26 PM
• Version:
  1.0.0

Overview

This DingTalk setup guide is mostly coherent, but its automatic approval-processing instructions are too broad for a business workflow without clear user controls.

Install only if you intend to connect OpenClaw to a DingTalk bot. Store webhook URLs and signing secrets securely, avoid committing or screenshotting config files, and use test webhooks for troubleshooting. Do not enable automatic approval processing unless actions are explicitly allowlisted, credentials are least-privilege, and a human confirms approve/reject/modify decisions.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill shows a configuration example containing a DingTalk webhook URL and secret but does not warn that these are sensitive credentials. Users may copy real values into plaintext config files, screenshots, logs, or source control, which can let others send messages to the robot or abuse the integration.

Missing User Warnings

Low

• Confidence: 82% confidence
• Finding: The troubleshooting section includes a ready-to-run curl command that posts directly to the user's webhook without warning that it sends data to an external service. While the payload is only a test message, this can still cause unintended outbound transmission and may normalize unsafe testing with production webhooks.

VirusTotal

64/64 vendors flagged this skill as clean.