OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 16, 2026
Independent checks from skills.sh's audit partners.
This skill facilitates the management of DingTalk AI tables using the Notable API. It involves handling sensitive application credentials, such as the App Secret, which are stored in plain text in a local configuration file. The skill also uses shell commands for automated token management and identity conversion. Additionally, the skill processes data from table records without explicit sanitization, creating a surface for indirect prompt injection.
Detected behaviors
No alerts
No issues
1/2 files flagged
Score: 93/100 · 2 sections analyzed