dingtalk-connection

Savant verdict: Review advised

Security analysis or source-hub review identified patterns requiring attention.

Live evaluation

Not evaluated yet. Workspaces can request a live evaluation.

Security assessment

Scan pending.

Structure

• Ships 2 executable scriptsbridge.py, setup_service.py. Review what they do before enabling the skill for agents with tool access.
• No license declaredConfirm you may reuse this skill before importing it into your repository.
• The source hub's security checks flagged this skillGen Agent Trust Hub: warn (This skill establishes a bridge between DingTalk and a local AI gateway. It includes functionality to create a persistent macOS service (LaunchAgent) and reads local configuration files containing authentication tokens. Additionally, it processes external messages from DingTalk, creating a potential surface for indirect prompt injection.); Socket: warn (2 alerts: gptAnomaly); Snyk: warn (Risk: MEDIUM · 1 issue); Runlayer: warn (6/6 files flagged)

SKILL.md

---
name: dingtalk-connection
description: Bridge DingTalk outgoing webhook messages to Clawdbot Gateway and send replies back to DingTalk sessions. Use when setting up DingTalk as a messaging channel, troubleshooting webhook delivery, or running the local bridge service.
---

# DingTalk Bridge

Bridge DingTalk bot messages to Clawdbot Gateway over a local WebSocket connection.

## Architecture

```
DingTalk user -> DingTalk cloud -> webhook (bridge.py) -> Clawdbot Gateway -> AI agent
```

## Setup

### 1. Create DingTalk bot

Create a bot that can send outgoing webhooks and set the callback URL to your public endpoint.

### 2. Run bridge

```bash
cd <skill-dir>/dingtalk-connection
uv sync
DINGTALK_SIGNING_SECRET=your_secret uv run python bridge.py
```

### 3. Auto-start (macOS)

```bash
uv run python setup_service.py
launchctl load ~/Library/LaunchAgents/com.clawdbot.dingtalk-bridge.plist
```

## Environment variables

| Variable | Required | Default |
|---|---|---|
| `DINGTALK_PORT` | — | `3210` |
| `DINGTALK_PATH` | — | `/dingtalk` |
| `DINGTALK_SIGNING_SECRET` | — | — |
| `DINGTALK_BOT_ID` | — | — |
| `DINGTALK_BOT_NAME` | — | — |
| `CLAWDBOT_CONFIG_PATH` | — | `~/.clawdbot/clawdbot.json` |
| `CLAWDBOT_AGENT_ID` | — | `main` |
| `DINGTALK_THINKING_THRESHOLD_MS` | — | `2500` |