Skill audit report
dingtalk_channel_connect Audit report.
使用可视浏览器自动完成 CoPaw 的钉钉频道接入。适用于用户提到钉钉、DingTalk、开发者后台、Client ID、Client Secret、机器人、Stream 模式、绑定或配置 channel 的场景;支持遇到登录页时暂停,等待用户登录后继续。
OpenAgentSkill Trust Score
OpenAgentSkill Trust Score
The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.
GitHub adoption
INFO62
116 GitHub stars
Stars/forks activity
WARN57
116 stars, 32 forks; issue activity unavailable in current metadata
Recent maintenance
PASS100
1d since push
License clarity
PASS86
Apache-2.0
README/SKILL.md completeness
INFO76
Public metadata needs stronger README/SKILL.md context
Dependency/runtime risk
INFO64
credential or environment access, network or browser surface
Install availability
PASS92
npx skills add hyqibot/token-free-openclaw --skill dingtalk_channel_connect
Install command safety
INFO68
credential-bearing install command, standard package or runtime install path
Permission surface
WARN60
secrets or environment access, network or browser access
Repository evidence
PASS86
https://github.com/hyqibot/token-free-openclaw/tree/main/copaw/agents/skills/dingtalk_channel
Review status
INFO66
AI review data available
Agent Proven outcomes
INFO54
No agent outcome data yet
Checks
Install and adoption review
Install path
92
npx skills add hyqibot/token-free-openclaw --skill dingtalk_channel_connect
Repository
88
https://github.com/hyqibot/token-free-openclaw/tree/main/copaw/agents/skills/dingtalk_channel
License
86
Apache-2.0
Maintenance
100
1d since push
AI review
55
SKILL.md 未明确提及许可证信息,但仓库根目录已声明 Apache-2.0,建议在文档中补充以增强合规透明度。
README/SKILL.md completeness
84
Usable description available
Dependency risk
64
credential or environment access, network or browser surface
Install command safety
68
credential-bearing install command, standard package or runtime install path
Permission surface
60
secrets or environment access, network or browser access
Stars/forks activity
57
116 stars, 32 forks; issue activity unavailable in current metadata
Adoption
68
116 GitHub stars
Warnings
- Permission surface may require sandboxing
- SKILL.md 未明确提及许可证信息,但仓库根目录已声明 Apache-2.0,建议在文档中补充以增强合规透明度。
- 图片上传策略中依赖 iframe 选择器,若页面结构变化可能导致失败,但已提供降级方案(暂停并让用户手动上传)。
- Quality score needs review
- Permission surface needs review: secrets or environment access, network or browser access
- Stars/forks activity: 116 stars, 32 forks; issue activity unavailable in current metadata
- Permission surface: secrets or environment access, network or browser access
Method
This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.
Compare nearby options
Related skills to audit next
Wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
16K Stars · Audit report
Maigret
🕵️♂️ Collect a dossier on a person by username from 3000+ sites
33K Stars · Audit report
Nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the internet. It helps you find vulnerabilities in your applications, APIs, networks, DNS, and cloud configurations.
29K Stars · Audit report