Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add CavinHuang/lume --skill dingtalk-cligit clone --depth 1 https://github.com/CavinHuang/lumeWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/cavinhuang/lume/dingtalk-cli)<a href="https://agentmods.dev/skills/cavinhuang/lume/dingtalk-cli"><img src="https://agentmods.dev/badge/skills/cavinhuang/lume/dingtalk-cli/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/cavinhuang/lume/dingtalk-cli"><img src="https://agentmods.dev/badge/skills/cavinhuang/lume/dingtalk-cli.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00046 | $0.00481 |
| Opus 5.5 | $0.00018 | $0.00192 |
| Sonnet 5.5 | $0.00009 | $0.00096 |
| Haiku 4.5 | $0.00005 | $0.00048 |
Grade A, and why
钉钉企业 IM 操作 scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
钉钉 CLI(dws)操作手册
通过 dingtalk_cli 工具执行钉钉 CLI 子命令。工具签名:command(子命令)+ args(参数数组)。
授权(首次必做)
钉钉 CLI 使用 OAuth 授权,授权需企业管理员审批,用户须在 Lume IM 设置中完成。
- 检查授权状态:
command="auth",args=["status"] - 发起授权:
command="auth",args=["login", "--yes", "--format", "json", "--no-browser"](返回登录 URL,用户在浏览器打开)
未授权时工具结果会含 guidance 字段,提示去设置授权。
能力域
dws 覆盖钉钉主要能力域。子命令可能随版本变化,优先用 command="<域>", args=["--help"] 动态确认参数,不要猜测:
| 能力域 | 典型用途 |
|---|---|
| message | 发送工作通知 / 消息 |
| calendar | 查询、创建日历日程 |
| doc / drive | 读取钉钉文档、云盘文件 |
| contact | 查询通讯录、组织架构、部门成员 |
| todo | 管理待办任务 |
| attendance | 考勤数据 |
使用要点
- 先
auth status确认已授权;未授权时停止并提示用户去设置授权。 - 不确定参数时,对目标子命令加
--help探索,不要猜测参数。 - 发消息等写操作是真实企业行为,确认目标接收人与内容后再执行。
- 结果为结构化 JSON(
dingtalk_cli返回 stdout);解析失败时检查stderr与exitCode。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 40 lines · 46 tokens per session scan A df302d434f9a
钉钉企业 IM 操作 is a skill published in the GitHub repository CavinHuang/lume (3 stars, last pushed 1mo ago), licensed MIT. It adds 46 tokens to every session and 481 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
proma-coach
A Chinese-language coach for improving how people use Proma, Agent, Skill, Chat, and project tools.
automation
A built-in workflow for creating and managing automatic or scheduled tasks. It covers one-time delays, repeated runs, monitoring, reminders, run history, and changing or stopping existing tasks.
slack
Read and search messages, channels, and threads in the user's Slack workspace. Use to catch up on team discussions and decisions, post channel messages, and reply to coworkers through Slack's official MCP server.
taskflow-inbox-triage
Example TaskFlow authoring pattern for inbox triage. Use when messages need different treatment based on intent, with some routes notifying immediately, some waiting on outside answers, and others rolling into a later summary.
status-report
Use when the user asks for a weekly / monthly status report, project update, individual or team progress summary. Produces a tight, scannable update with what shipped, what's in flight, what's blocked, and metrics.
meeting-notes
Use when the user asks to capture, structure, or summarize meeting notes / call notes / 1:1 discussion / standup notes. Produces a standard template with attendees, agenda, decisions, action items (owner + deadline), and open questions.