by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears internally consistent and implements expected safety checks (path sandboxing, size/extension limits). Before installing: 1) Ensure the mcporter binary you install comes from an official source; 2) Treat DINGTALK_MCP_DOCS_URL as a sensitive token — prefer storing it in mcporter config as recommended instead of exporting it to your shell history; 3) Be aware the provided import/export scripts will read and write files inside your workspace (they enforce a workspace sandbox but d...详细分析 ▾
✓ 用途与能力
Name/description match what is required: mcporter is the expected client for MCP tools and DINGTALK_MCP_DOCS_URL is the service URL/token needed to call the documented MCP methods. Required binaries and env vars are proportionate to a MCP-based DingTalk docs integration.
✓ 指令范围
SKILL.md and scripts limit actions to document create/search/read/write flows using mcporter. Scripts that read/write local files (import/export) explicitly constrain themselves to the workspace, enforce path-sandboxing, allowed extensions and size limits, and only call MCP via mcporter rather than making raw network calls.
✓ 安装机制
No install spec (instruction-only) — nothing is downloaded or executed automatically. The package contains helper scripts for local use; they run mcporter via subprocess which is expected for this integration. No suspicious URLs or extraction steps are present.
✓ 凭证需求
Only DINGTALK_MCP_DOCS_URL is declared as required (primaryEnv). Scripts optionally use OPENCLAW_WORKSPACE to constrain file access but do not require other secrets. The declared env var is justified since it contains the MCP streamable URL/token.
✓ 持久化与权限
always is false and the skill does not request persistent/privileged system changes. It does not modify other skills or system-wide configs. Autonomous invocation is allowed (platform default) but not combined with broad unexplained access.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.3.42026/3/2
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install dingtalk-docs
镜像加速npx clawhub@latest install dingtalk-docs --registry https://cn.longxiaskill.com