← 返回 Skills 市场
cizixiu

Dingtalk CLI SKILL

作者 花渡 · GitHub ↗ · v1.0.13 · MIT-0
cross-platform ⚠ suspicious
107
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install dingtalk-cli-skill
功能描述
Dingtalk CLI SKILL / 钉钉 dingding / dingtalk dws skill — Manage DingTalk products (AI forms, calendar, contacts, bots, todos, approvals, attendance, reports,...
使用说明 (SKILL.md)

\r \r

DingTalk dws Skill (WorkBuddy Version)\r

钉钉 dws 技能(WorkBuddy 版)\r

\r Use dws CLI to manage all DingTalk product capabilities.\r 使用 dws CLI 管理钉钉全部产品功能。\r \r ---\r \r

dws CLI Path / dws CLI 路径\r

\r dws is installed at $HOME\.local\bin\dws.exe. Always use the full path or ensure $HOME\.local\bin is in your PATH.\r dws 安装在 $HOME\.local\bin\dws.exe。调用时使用完整路径,或确保 $HOME\.local\bin 已加入 PATH 环境变量。\r \r ---\r \r

Authentication / 认证\r

\r First-time users must authenticate: / 首次使用需认证:\r \r

& "$HOME\.local\bin\dws.exe" auth login\r
```\r
\r
This opens a browser for QR code login. Credentials persist for 30 days.\r
此命令会打开浏览器,引导扫码登录钉钉。凭证有效期 30 天。\r
\r
**Re-authenticate when expired:** / **凭证过期后重新认证:**\r
\r
```\r
& "$HOME\.local\bin\dws.exe" auth login\r
```\r
\r
---\r
\r
## Common Commands / 常用命令\r
\r
| Scenario 场景 | Command 命令 |\r
:|----------|---------|\r
| List todos / 查看待办 | `dws todo task list` |\r
| Create todo / 创建待办 | `dws todo task create --title "Report" --deadline 2026-04-15` |\r
| List calendar / 查看日历 | `dws calendar event list` |\r
| Send group message / 发群消息 | `dws chat bot send-by-group --group-id \x3CID> --content "Message"` |\r
| List reports / 查看日报周报 | `dws report inbox list` |\r
| Search contact / 搜索联系人 | `dws contact user search --keyword "Name"` |\r
| List AI tables / 查看 AI 表格 | `dws aitable base list` |\r
\r
See the `references/` directory for full documentation on all 12 DingTalk products.\r
查看 `references/` 目录获取全部 12 个钉钉产品的详细文档。\r
安全使用建议
This skill mostly matches its stated purpose (it is a wrapper/guide for the dws DingTalk CLI), but there are red flags you should address before installing: - Verify provenance: the package owner and homepage are missing; the install URL points to a GitHub repo that may not be the official DingTalk/dingtalk project. Confirm the repo is trustworthy before downloading executables. - Confirm the binary: if you plan to use the included install URL, manually download and verify the SHA256 checksum and inspect the binary/source. Prefer to download from the official DingTalk org if available. - OS mismatch: the SKILL.md's install step provides a Windows dws.exe; ensure this fits your OS or that a proper build exists for your platform. - Protect credentials: the skill requests DWS_CLIENT_ID and DWS_CLIENT_SECRET (normal for headless auth). Only set these for a CLI/binary you trust. Avoid pasting secrets into unreviewed install scripts. - Inspect bundled scripts: the package includes multiple Python helper scripts (upload_attachment.py, calendar schedulers, etc.). Review them for network endpoints or unexpected behavior before running. - Least privilege: consider using a test DingTalk account or limited-scope app credentials when first enabling the skill. If you cannot verify the download/source or review the scripts, treat the skill as untrusted and do not provide your production client secret or point DWS_SERVERS_URL to non-official endpoints.
功能分析
Type: OpenClaw Skill Name: dingtalk-cli-skill Version: 1.0.13 The dingtalk-cli-skill bundle is a comprehensive integration for the DingTalk 'dws' CLI, providing tools for managing tasks, calendars, contacts, and AI tables. The included Python scripts (e.g., bulk_add_fields.py, import_records.py, upload_attachment.py) are well-structured utility wrappers that include security best practices such as path validation (resolve_safe_path) to prevent directory traversal and file size limits. The documentation is exceptionally thorough, including an advanced 'recovery' mechanism designed to help AI agents debug CLI failures by analyzing state snapshots. No evidence of data exfiltration, malicious execution, or prompt injection was found; the skill's behavior aligns strictly with its stated purpose of DingTalk workspace management.
能力标签
requires-oauth-token
能力评估
Purpose & Capability
Name/description match the declared requirements: it expects the dws CLI and DingTalk credentials (DWS_CLIENT_ID/SECRET), which are appropriate for a dws-based skill. However, the package includes many helper Python scripts and internal docs while registry metadata claimed 'instruction-only'—this mismatch is unexpected but could be legitimate (bundled helper scripts).
Instruction Scope
SKILL.md instructs only to use the dws CLI (auth login and various dws commands) and references the included scripts for attachments/automation. It does not instruct the agent to read unrelated system files or exfiltrate data. It does, however, instruct running a browser-based QR login (normal for OAuth device flow).
Install Mechanism
SKILL.md contains an install entry that downloads a dws-windows-amd64.zip from a GitHub repo (github.com/DingTalk-Real-AI/...), with a SHA256. Registry metadata claimed 'No install spec', creating an inconsistency. The URL is a GitHub release (lower risk than arbitrary server) but points to a project/repo that is not clearly official; the artifact is Windows-only (dws-windows-amd64.zip / dws.exe) while the skill has no OS restriction—this Windows-specific install + cross-platform scripts is mismatched and should be validated.
Credentials
Requested env vars (DWS_CLIENT_ID, DWS_CLIENT_SECRET, DWS_CONFIG_DIR, DWS_SERVERS_URL) are consistent with a CLI that supports headless auth and custom endpoints. They are proportional to the claimed functionality. Caution: DWS_SERVERS_URL can point the CLI to arbitrary service endpoints; providing client secret to an untrusted skill or binary from an unverified repo increases exposure.
Persistence & Privilege
Skill is not marked always:true and does not request system-wide privileged changes in its docs. It uses local CLI/auth flow and scripts stored under a skill directory—no evidence it alters other skills or global agent settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install dingtalk-cli-skill
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /dingtalk-cli-skill 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.13
- Updated SKILL.md with detailed usage instructions, authentication steps, and common command examples. - Added bilingual (English/Chinese) documentation for installation, authentication, and available features. - Clarified required environment variables and binary installation steps. - Improved descriptions for managing DingTalk products using the dws CLI.
元数据
Slug dingtalk-cli-skill
版本 1.0.13
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Dingtalk CLI SKILL 是什么?

Dingtalk CLI SKILL / 钉钉 dingding / dingtalk dws skill — Manage DingTalk products (AI forms, calendar, contacts, bots, todos, approvals, attendance, reports,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 107 次。

如何安装 Dingtalk CLI SKILL?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install dingtalk-cli-skill」即可一键安装,无需额外配置。

Dingtalk CLI SKILL 是免费的吗?

是的,Dingtalk CLI SKILL 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Dingtalk CLI SKILL 支持哪些平台?

Dingtalk CLI SKILL 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Dingtalk CLI SKILL?

由 花渡(@cizixiu)开发并维护,当前版本 v1.0.13。

💬 留言讨论