dingtalk-doc
钉钉文档（adoc）：创建、读取、编辑、块、评论、附件、导出、版本及Markdown/JSONML写入。原生 .md→dingtalk-misc；文件→dingtalk-drive；知识库→dingtalk-wiki；axls→dingtalk-misc，able→dingtalk-aitable。
62
76%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Fix and improve this skill with Tessl
tessl review fix ./skills/multi/dingtalk-doc/SKILL.mdLow
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
运行时路径是 `dws doc read/search` 先定位用户可能提交的文档（via 用户给 URL/nodeId 或 `dws drive search` 的检索结果），随后直接读取并把该文档/块的正文文本（Markdown/JSONML）喂给 LLM 用于后续写入与精修，因此存在外部租户用户发布文本被摄取的间接提示注入风险。
- Repository
- DingTalk-Real-AI/dingtalk-workspace-cli
- Commit
1877870
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.