@dingtalk-real-ai/dingtalk-connector
Official OpenClaw DingTalk channel plugin | 钉钉官方 OpenClaw 插件
- Created
- 9 months ago
- Last commit
- 2 weeks ago
- Latest release
- v0.8.272 weeks ago
Security Findings
5Recently created account
SuspiciousLineageAccount was 0d old when repo was created
Remote code execution pipe
MaliciousBundledDownloads and pipes to shell: curl -fsSL https://github.com/open-dingtalk/dingtalk-workspace-cli/releases/latest/download/install.sh | sh
skills/dingtalk-troubleshoot
External binary download
SuspiciousBundledPrerequisite downloads from non-standard source: https://github.com/open-dingtalk/dingtalk-workspace-cli/releases/latest/download/install.sh
skills/dingtalk-troubleshoot
Low-provenance referenced GitHub repo
SuspiciousBundledReferenced repo open-dingtalk/dingtalk-workspace-cli not found (deleted / renamed / private): https://github.com/open-dingtalk/dingtalk-workspace-cli/releases/latest/download/install.sh
skills/dingtalk-troubleshoot
Workflow makes outbound network call
SuspiciousLineage[.github/workflows/ai-fix-and-test.yml] curl -s -X POST https://api.openai.com/v1/chat/completions
Contents
3 skills bundled by this extension
dingtalk-troubleshoot
skill
Why it’s flagged
Remote code execution pipe
Downloads and pipes to shell: curl -fsSL https://github.com/open-dingtalk/dingtalk-workspace-cli/releases/latest/download/install.sh | sh
+2 more findings
dingtalk-channel-rules
skill
dws-cli
skill
Editions
1- 0.8.20Scanned Oct 28, 2026, 08:11 AMHigh