Skill audit report

dingtalk_channel_connect Audit report.

使用可视浏览器自动完成 CoPaw 的钉钉频道接入。适用于用户提到钉钉、DingTalk、开发者后台、Client ID、Client Secret、机器人、Stream 模式、绑定或配置 channel 的场景;支持遇到登录页时暂停,等待用户登录后继续。

EXPERIMENTAL · REVIEWNeeds reviewGenerated Aug 22, 2026Heuristic metadata audit
75
Audit
67
Trust
67
Quality
73
Security
100
Maintain
92
Install

OpenAgentSkill Trust Score

67
Manual review

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

INFO

62

116 GitHub stars

Stars/forks activity

WARN

57

116 stars, 32 forks; issue activity unavailable in current metadata

Recent maintenance

PASS

100

1d since push

License clarity

PASS

86

Apache-2.0

README/SKILL.md completeness

INFO

76

Public metadata needs stronger README/SKILL.md context

Dependency/runtime risk

INFO

64

credential or environment access, network or browser surface

Install availability

PASS

92

npx skills add hyqibot/token-free-openclaw --skill dingtalk_channel_connect

Install command safety

INFO

68

credential-bearing install command, standard package or runtime install path

Permission surface

WARN

60

secrets or environment access, network or browser access

Repository evidence

PASS

86

https://github.com/hyqibot/token-free-openclaw/tree/main/copaw/agents/skills/dingtalk_channel

Review status

INFO

66

AI review data available

Agent Proven outcomes

INFO

54

No agent outcome data yet

Checks

Install and adoption review

5 Passed · 12 Needs review

Install path

92

PASS

npx skills add hyqibot/token-free-openclaw --skill dingtalk_channel_connect

Repository

88

PASS

https://github.com/hyqibot/token-free-openclaw/tree/main/copaw/agents/skills/dingtalk_channel

License

86

PASS

Apache-2.0

Maintenance

100

PASS

1d since push

AI review

55

CHECK

SKILL.md 未明确提及许可证信息,但仓库根目录已声明 Apache-2.0,建议在文档中补充以增强合规透明度。

README/SKILL.md completeness

84

PASS

Usable description available

Dependency risk

64

CHECK

credential or environment access, network or browser surface

Install command safety

68

CHECK

credential-bearing install command, standard package or runtime install path

Permission surface

60

CHECK

secrets or environment access, network or browser access

Stars/forks activity

57

FIX

116 stars, 32 forks; issue activity unavailable in current metadata

Adoption

68

INFO

116 GitHub stars

Warnings

  • Permission surface may require sandboxing
  • SKILL.md 未明确提及许可证信息,但仓库根目录已声明 Apache-2.0,建议在文档中补充以增强合规透明度。
  • 图片上传策略中依赖 iframe 选择器,若页面结构变化可能导致失败,但已提供降级方案(暂停并让用户手动上传)。
  • Quality score needs review
  • Permission surface needs review: secrets or environment access, network or browser access
  • Stars/forks activity: 116 stars, 32 forks; issue activity unavailable in current metadata
  • Permission surface: secrets or environment access, network or browser access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Compare nearby options

Related skills to audit next