功能描述

钉钉 CLI 技能 / 钉钉 dingding / 钉钉 dws skill / 管理钉钉全部产品：AI表格、日历、通讯录、群聊机器人、待办、审批、考勤、日报周报、DING消息、工作台。Manage DingTalk products (AI forms, calendar, contacts, bots, to...

使用说明 (SKILL.md)

\r \r

DingTalk dws Skill (WorkBuddy Version)\r

Name: Dingtalk CLI SKILL
Author: cizixiu

钉钉 dws 技能（WorkBuddy 版）\r

\r Use dws CLI to manage all DingTalk product capabilities.\r 使用 dws CLI 管理钉钉全部产品功能。\r \r ---\r \r

dws CLI Path / dws CLI 路径\r

\r dws is installed at $HOME\.local\bin\dws.exe. Always use the full path or ensure $HOME\.local\bin is in your PATH.\r dws 安装在 $HOME\.local\bin\dws.exe。调用时使用完整路径，或确保 $HOME\.local\bin 已加入 PATH 环境变量。\r \r ---\r \r

Authentication / 认证\r

\r First-time users must authenticate: / 首次使用需认证：\r \r

& "$HOME\.local\bin\dws.exe" auth login\r
```\r
\r
This opens a browser for QR code login. Credentials persist for 30 days.\r
此命令会打开浏览器，引导扫码登录钉钉。凭证有效期 30 天。\r
\r
**Re-authenticate when expired:** / **凭证过期后重新认证：**\r
\r
```\r
& "$HOME\.local\bin\dws.exe" auth login\r
```\r
\r
---\r
\r
## Common Commands / 常用命令\r
\r
| Scenario 场景 | Command 命令 |\r
:|----------|---------|\r
| List todos / 查看待办 | `dws todo task list` |\r
| Create todo / 创建待办 | `dws todo task create --title "Report" --deadline 2026-04-15` |\r
| List calendar / 查看日历 | `dws calendar event list` |\r
| Send group message / 发群消息 | `dws chat bot send-by-group --group-id \x3CID> --content "Message"` |\r
| List reports / 查看日报周报 | `dws report inbox list` |\r
| Search contact / 搜索联系人 | `dws contact user search --keyword "Name"` |\r
| List AI tables / 查看 AI 表格 | `dws aitable base list` |\r
\r
See the `references/` directory for full documentation on all 12 DingTalk products.\r
查看 `references/` 目录获取全部 12 个钉钉产品的详细文档。\r

安全使用建议

This skill appears to be a legitimate dws CLI wrapper, but there are inconsistencies and a few moderate risks to check before installing: - Metadata inconsistency: the registry claims 'no install spec' while SKILL.md includes a download/install section. Confirm which is authoritative. - Platform mismatch: the provided install artifact is a Windows dws.exe; if you run on Linux/macOS ensure there is an appropriate release. The skill's files and docs mix Windows PowerShell and POSIX-like paths — verify target OS. - Verify the binary: the install URL points to a GitHub release and includes a SHA256 — download the zip yourself, verify the checksum, and inspect the binary/source release on the referenced GitHub repo before executing. - Inspect scripts: the package includes multiple Python automation scripts (including attachment upload). Review these scripts for endpoints and behavior (they perform prepare + PUT flows and will interact with remote storage). Do not run scripts you can't audit. - Protect secrets and endpoints: DWS_CLIENT_SECRET is required — only set it in a secure environment. Be cautious with DWS_SERVERS_URL: do not point it to unknown or untrusted servers (that could redirect the CLI to exfiltrate data). - Least privilege practice: consider running first in an isolated/test account or sandbox, and set DWS_CONFIG_DIR to a dedicated directory you control so tokens remain segregated. If you want, I can: (1) list the exact differences between registry metadata and SKILL.md/install, (2) fetch and show the scripts' content highlights (if allowed), or (3) produce concrete steps to safely install and verify the binary and scripts.

功能分析

Type: OpenClaw Skill Name: dingtalk-dws Version: 1.0.12 The dingtalk-dws skill bundle provides a comprehensive set of Python wrappers for the 'dws' CLI tool to manage DingTalk services. The scripts (e.g., import_records.py, bulk_add_fields.py) include security-conscious logic such as path sanitization to prevent directory traversal and input validation for resource IDs. The installation instructions in SKILL.md and README.md emphasize verifying SHA256 checksums and inspecting installation scripts before execution, which is a positive security indicator. No evidence of malicious intent, unauthorized data exfiltration, or prompt injection attacks was found.

能力标签

requires-oauth-token

能力评估

ℹ Purpose & Capability

The skill is clearly a wrapper/documentation + helper scripts for the DingTalk 'dws' CLI and requests the expected CLI binary and OAuth client id/secret. However the registry summary says 'no install spec' while SKILL.md contains an install URL; the declared required binary is 'dws' but the install artifact is a Windows dws.exe. These mismatches (install presence and platform targeting) are inconsistent with a clean listing.

✓ Instruction Scope

SKILL.md instructs the agent (and user) to run the dws CLI and to authenticate using dws auth login (opens browser QR login). The runtime instructions reference only dws commands, local skill files, and a local CLI path. They do not instruct reading unrelated system files or exfiltrating data. The scripts directory (Python scripts) is intended for attachment upload and automation — you should inspect those scripts before running.

ℹ Install Mechanism

The SKILL.md includes an install entry that downloads a dws-windows-amd64.zip from a GitHub releases URL with a provided SHA256 — this is an expected but higher-risk install mechanism than an instruction-only skill. The URL is a GitHub release (well-known host) and a checksum is provided, which reduces risk. Concerns: the install entry is Windows-specific (dws.exe) while the manifest/requirements don't clearly state platform restrictions; registry metadata claimed 'no install spec' which is inconsistent.

✓ Credentials

Required env vars (DWS_CLIENT_ID, DWS_CLIENT_SECRET, DWS_CONFIG_DIR, DWS_SERVERS_URL) align with a CLI that needs OAuth credentials and configuration. Note: DWS_SERVERS_URL lets the CLI be pointed to a custom server endpoint — legitimate for self-hosting/testing but it can be abused if set to an untrusted endpoint.

✓ Persistence & Privilege

The skill does not request always:true or other elevated listing-level privileges. It expects the CLI to persist tokens locally (30 days) in the config directory (DWS_CONFIG_DIR) — expected behavior for a CLI-based OAuth flow. The skill does not declare writing other skills' config or global agent config.

版本历史

v1.0.12

- Version bump to 1.0.12 with no file changes detected. - No new features, fixes, or documentation updates included in this release.

v1.0.11

- Updated description to include "钉钉 dingding" for greater clarity and search relevance. - No functional or command changes; documentation only.

v1.0.10

- Updated the description in SKILL.md for improved clarity and bilingual consistency. - No changes to code or functionality; documentation only.

v1.0.9

- Updated skill version to 1.0.9. - Enhanced description: now includes a brief Chinese title and clarifies CLI focus. - No changes to usage instructions, commands, or CLI details.

v1.0.8

- Added new _meta.json file for enhanced skill metadata management.

v1.0.7

- Updated version to 1.0.7 in SKILL.md. - Cleaned up and unified the description field. - Removed duplicate description:zh key from SKILL.md header.

v1.0.6

- Updated the English description for clarity and conciseness. - No changes to functionality or commands.

v1.0.5

- Added Chinese-language fields and documentation throughout SKILL.md for full bilingual support. - Updated description to include a Chinese version (description:zh). - Added Chinese translations for all usage instructions, authentication steps, and command examples. - The function and usage of the skill remain the same; only documentation was enhanced for better accessibility to Chinese users.

v1.0.4

- Added detailed Openclaw integration metadata for improved environment management and binary requirements. - Updated install instructions and download URL for dws CLI to version 1.0.8. - Changed skill name to "dingtalk-dws" for consistency. - Clarified command usage examples and improved formatting in documentation.

v1.0.3

**Summary: Added metadata, simplified documentation, and improved platform integration.** - Added detailed metadata in SKILL.md: version, platforms, install steps, required environment variables. - Included precise installation method and verification mechanism (sha256 checksum from GitHub releases). - Rewrote and condensed user documentation for setup, authentication, and key commands. - Improved clarity and structure for Windows users regarding binary paths. - Provided environment variable documentation for advanced/headless configurations. - Reduced duplication and removed lengthy, redundant developer notes from SKILL.md.

v1.0.2

- Updated README.md with clarifications and minor adjustments. - No functional or behavioral changes to the skill itself. - Usage instructions, core rules, and product overviews remain unchanged.

v1.0.1

- 修改 Windows 下 dws CLI 的安装路径说明，从用户目录具体用户名路径调整为通用 $HOME 路径 - 相应调整所有路径示例，以提高文档的通用性和适用范围 - 其余初始化、认证、操作规范内容未改动

v1.0.0

dingtalk-dws 1.0.0 - 首次发布，支持通过 dws CLI 管理钉钉各类产品能力（AI表格、日历、通讯录、群聊与机器人、待办、审批、考勤、日志、DING消息、工作台等） - 完整集成初始化流程指导，包括 CLI 一键安装与扫码认证要求 - 提供意图判断决策树，辅助用户精确选择对应产品和命令 - 严格规范危险操作的确认与执行流程，确保数据安全 - 系统化错误处理指引与全产品详细参考文档入口

元数据

Slug dingtalk-dws

版本 1.0.12

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 13

常见问题

Dingtalk CLI SKILL 是什么？

钉钉 CLI 技能 / 钉钉 dingding / 钉钉 dws skill / 管理钉钉全部产品：AI表格、日历、通讯录、群聊机器人、待办、审批、考勤、日报周报、DING消息、工作台。Manage DingTalk products (AI forms, calendar, contacts, bots, to... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 107 次。

如何安装 Dingtalk CLI SKILL？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install dingtalk-dws」即可一键安装，无需额外配置。

Dingtalk CLI SKILL 是免费的吗？

是的，Dingtalk CLI SKILL 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。

Dingtalk CLI SKILL 支持哪些平台？

Dingtalk CLI SKILL 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Dingtalk CLI SKILL？

由花渡（@cizixiu）开发并维护，当前版本 v1.0.12。

Dingtalk CLI SKILL