给钉钉的联系人或者群发送信息

• Analyzed: Mar 25, 2026, 11:56 AM
• Findings: 1
• Version: 1.0.2
• Hash: 54a5e0cad4a3c0abd609aa62069c35e332fe210f6b606b0fc964ddc952bf458c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides GUI automation for the DingDing (DingTalk) Windows desktop client using libraries like pyautogui and pyperclip. The code in server.py and send_batch.py implements the stated functionality of searching for contacts and sending messages via keyboard simulation (hotkeys like Ctrl+Shift+F and Enter). While the use of hardcoded click coordinates and the disabling of pyautogui.FAILSAFE are brittle and suboptimal coding practices, there is no evidence of malicious intent, data exfiltration, or unauthorized system access.