← Back to Skills Marketplace
cizixiu

Dingtalk CLI SKILL

by 花渡 · GitHub ↗ · v1.0.13 · MIT-0
cross-platform ⚠ suspicious
107
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install dingtalk-cli-skill
Description
Dingtalk CLI SKILL / 钉钉 dingding / dingtalk dws skill — Manage DingTalk products (AI forms, calendar, contacts, bots, todos, approvals, attendance, reports,...
README (SKILL.md)

\r \r

DingTalk dws Skill (WorkBuddy Version)\r

钉钉 dws 技能(WorkBuddy 版)\r

\r Use dws CLI to manage all DingTalk product capabilities.\r 使用 dws CLI 管理钉钉全部产品功能。\r \r ---\r \r

dws CLI Path / dws CLI 路径\r

\r dws is installed at $HOME\.local\bin\dws.exe. Always use the full path or ensure $HOME\.local\bin is in your PATH.\r dws 安装在 $HOME\.local\bin\dws.exe。调用时使用完整路径,或确保 $HOME\.local\bin 已加入 PATH 环境变量。\r \r ---\r \r

Authentication / 认证\r

\r First-time users must authenticate: / 首次使用需认证:\r \r

& "$HOME\.local\bin\dws.exe" auth login\r
```\r
\r
This opens a browser for QR code login. Credentials persist for 30 days.\r
此命令会打开浏览器,引导扫码登录钉钉。凭证有效期 30 天。\r
\r
**Re-authenticate when expired:** / **凭证过期后重新认证:**\r
\r
```\r
& "$HOME\.local\bin\dws.exe" auth login\r
```\r
\r
---\r
\r
## Common Commands / 常用命令\r
\r
| Scenario 场景 | Command 命令 |\r
:|----------|---------|\r
| List todos / 查看待办 | `dws todo task list` |\r
| Create todo / 创建待办 | `dws todo task create --title "Report" --deadline 2026-04-15` |\r
| List calendar / 查看日历 | `dws calendar event list` |\r
| Send group message / 发群消息 | `dws chat bot send-by-group --group-id \x3CID> --content "Message"` |\r
| List reports / 查看日报周报 | `dws report inbox list` |\r
| Search contact / 搜索联系人 | `dws contact user search --keyword "Name"` |\r
| List AI tables / 查看 AI 表格 | `dws aitable base list` |\r
\r
See the `references/` directory for full documentation on all 12 DingTalk products.\r
查看 `references/` 目录获取全部 12 个钉钉产品的详细文档。\r
Usage Guidance
This skill mostly matches its stated purpose (it is a wrapper/guide for the dws DingTalk CLI), but there are red flags you should address before installing: - Verify provenance: the package owner and homepage are missing; the install URL points to a GitHub repo that may not be the official DingTalk/dingtalk project. Confirm the repo is trustworthy before downloading executables. - Confirm the binary: if you plan to use the included install URL, manually download and verify the SHA256 checksum and inspect the binary/source. Prefer to download from the official DingTalk org if available. - OS mismatch: the SKILL.md's install step provides a Windows dws.exe; ensure this fits your OS or that a proper build exists for your platform. - Protect credentials: the skill requests DWS_CLIENT_ID and DWS_CLIENT_SECRET (normal for headless auth). Only set these for a CLI/binary you trust. Avoid pasting secrets into unreviewed install scripts. - Inspect bundled scripts: the package includes multiple Python helper scripts (upload_attachment.py, calendar schedulers, etc.). Review them for network endpoints or unexpected behavior before running. - Least privilege: consider using a test DingTalk account or limited-scope app credentials when first enabling the skill. If you cannot verify the download/source or review the scripts, treat the skill as untrusted and do not provide your production client secret or point DWS_SERVERS_URL to non-official endpoints.
Capability Analysis
Type: OpenClaw Skill Name: dingtalk-cli-skill Version: 1.0.13 The dingtalk-cli-skill bundle is a comprehensive integration for the DingTalk 'dws' CLI, providing tools for managing tasks, calendars, contacts, and AI tables. The included Python scripts (e.g., bulk_add_fields.py, import_records.py, upload_attachment.py) are well-structured utility wrappers that include security best practices such as path validation (resolve_safe_path) to prevent directory traversal and file size limits. The documentation is exceptionally thorough, including an advanced 'recovery' mechanism designed to help AI agents debug CLI failures by analyzing state snapshots. No evidence of data exfiltration, malicious execution, or prompt injection was found; the skill's behavior aligns strictly with its stated purpose of DingTalk workspace management.
Capability Tags
requires-oauth-token
Capability Assessment
Purpose & Capability
Name/description match the declared requirements: it expects the dws CLI and DingTalk credentials (DWS_CLIENT_ID/SECRET), which are appropriate for a dws-based skill. However, the package includes many helper Python scripts and internal docs while registry metadata claimed 'instruction-only'—this mismatch is unexpected but could be legitimate (bundled helper scripts).
Instruction Scope
SKILL.md instructs only to use the dws CLI (auth login and various dws commands) and references the included scripts for attachments/automation. It does not instruct the agent to read unrelated system files or exfiltrate data. It does, however, instruct running a browser-based QR login (normal for OAuth device flow).
Install Mechanism
SKILL.md contains an install entry that downloads a dws-windows-amd64.zip from a GitHub repo (github.com/DingTalk-Real-AI/...), with a SHA256. Registry metadata claimed 'No install spec', creating an inconsistency. The URL is a GitHub release (lower risk than arbitrary server) but points to a project/repo that is not clearly official; the artifact is Windows-only (dws-windows-amd64.zip / dws.exe) while the skill has no OS restriction—this Windows-specific install + cross-platform scripts is mismatched and should be validated.
Credentials
Requested env vars (DWS_CLIENT_ID, DWS_CLIENT_SECRET, DWS_CONFIG_DIR, DWS_SERVERS_URL) are consistent with a CLI that supports headless auth and custom endpoints. They are proportional to the claimed functionality. Caution: DWS_SERVERS_URL can point the CLI to arbitrary service endpoints; providing client secret to an untrusted skill or binary from an unverified repo increases exposure.
Persistence & Privilege
Skill is not marked always:true and does not request system-wide privileged changes in its docs. It uses local CLI/auth flow and scripts stored under a skill directory—no evidence it alters other skills or global agent settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install dingtalk-cli-skill
  3. After installation, invoke the skill by name or use /dingtalk-cli-skill
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.13
- Updated SKILL.md with detailed usage instructions, authentication steps, and common command examples. - Added bilingual (English/Chinese) documentation for installation, authentication, and available features. - Clarified required environment variables and binary installation steps. - Improved descriptions for managing DingTalk products using the dws CLI.
Metadata
Slug dingtalk-cli-skill
Version 1.0.13
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Dingtalk CLI SKILL?

Dingtalk CLI SKILL / 钉钉 dingding / dingtalk dws skill — Manage DingTalk products (AI forms, calendar, contacts, bots, todos, approvals, attendance, reports,... It is an AI Agent Skill for Claude Code / OpenClaw, with 107 downloads so far.

How do I install Dingtalk CLI SKILL?

Run "/install dingtalk-cli-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Dingtalk CLI SKILL free?

Yes, Dingtalk CLI SKILL is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Dingtalk CLI SKILL support?

Dingtalk CLI SKILL is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Dingtalk CLI SKILL?

It is built and maintained by 花渡 (@cizixiu); the current version is v1.0.13.

💬 Comments