dingtalk-minutes
钉钉 AI 听记。Use when 查询听记摘要、转写、关键词、待办或分享。写文档走 dingtalk-doc；日程走 dingtalk-calendar。
73
92%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
在 minutes 内置的运行路径中会读取来自用户在会话/听记中可访问对象的逐字转写与摘要等自由文本（例如 `dws minutes get transcription` 在 `get transcription` 翻页拉取并由 LLM 读取后进行后续总结/聚类/发言人推断），而这些文本最终可由外部用户/成员事后“提交/篡改”为注入性内容并被该 LLM 在运行时摄入。
- Repository
- DingTalk-Real-AI/dingtalk-workspace-cli
- Commit
e9de685
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.