Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/cavinhuang/lume/dingtalk-clinpx skills add CavinHuang/lume --skill dingtalk-cligit clone --depth 1 https://github.com/CavinHuang/lumeWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00046 | $0.00481 |
| Opus 5 | $0.00023 | $0.00241 |
| Sonnet 5 | $0.00009 | $0.00096 |
| Haiku 4.5 | $0.00005 | $0.00048 |
Grade A, and why
钉钉企业 IM 操作 scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
钉钉 CLI(dws)操作手册
通过 dingtalk_cli 工具执行钉钉 CLI 子命令。工具签名:command(子命令)+ args(参数数组)。
授权(首次必做)
钉钉 CLI 使用 OAuth 授权,授权需企业管理员审批,用户须在 Lume IM 设置中完成。
- 检查授权状态:
command="auth",args=["status"] - 发起授权:
command="auth",args=["login", "--yes", "--format", "json", "--no-browser"](返回登录 URL,用户在浏览器打开)
未授权时工具结果会含 guidance 字段,提示去设置授权。
能力域
dws 覆盖钉钉主要能力域。子命令可能随版本变化,优先用 command="<域>", args=["--help"] 动态确认参数,不要猜测:
| 能力域 | 典型用途 |
|---|---|
| message | 发送工作通知 / 消息 |
| calendar | 查询、创建日历日程 |
| doc / drive | 读取钉钉文档、云盘文件 |
| contact | 查询通讯录、组织架构、部门成员 |
| todo | 管理待办任务 |
| attendance | 考勤数据 |
使用要点
- 先
auth status确认已授权;未授权时停止并提示用户去设置授权。 - 不确定参数时,对目标子命令加
--help探索,不要猜测参数。 - 发消息等写操作是真实企业行为,确认目标接收人与内容后再执行。
- 结果为结构化 JSON(
dingtalk_cli返回 stdout);解析失败时检查stderr与exitCode。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 40 lines · 46 tokens per session scan A df302d434f9a
钉钉企业 IM 操作 is a skill published in the GitHub repository CavinHuang/lume (2 stars, last pushed 2d ago), licensed MIT. It adds 46 tokens to every session and 481 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
proma-coach
Proma 使用顾问，主动把用户在 Proma/Agent/Skill/Chat 工具/项目里的摩擦、疑惑、重复解释和低效流程，转成更顺手的使用方式或合适的知识维护动作。触发要积极：用户表达不满、困惑、重复提醒、"为什么没用/不会自动/又要我说"、"算了，我自己来"、"你上次不是说..."、"你又忘了"、"以后都这样/能不能记住/少让我选/下次自动"、询问 Proma 怎么用更好、某事能不能固化、该用 Agent 还是 Chat 工具、有没有现成 Skill、Skill 为什么没触发、想优化已有 Skill description、想减少步骤/降低认知负担/让 Proma…
automation
Proma 内嵌自动任务与定时任务 Skill，属于 Proma 自带能力而不是用户临时安装的外部 Skill。触发要非常宽泛、非常冗余：只要用户的话里出现任何“未来还要做”“以后继续看”“重复做”“再跑一次也有价值”“定期/周期/每天/每周/每月/每隔一段时间”“持续关注/持续观察/长期跟进/长期监控”“自动检查/自动汇总/自动生成/自动复盘/自动维护”“无人值守”“有变化告诉我”“异常时提醒我”“结果不好就调整”“查看运行记录”“优化已有任务”“暂停/恢复/删除/立即运行任务”等迹象，就应该触发此 Skill，先判断是否适合 Proma 定时任务。也要覆盖一次性与有限次的延时执行信号：“X…
ha-mac-control
Hope Agent native macOS desktop control — the standard maccontrol status / diagnostics / apps / dock / spaces / snapshot / visual / windows / menu / clipboard / dialog loop, target-first action rules, no-blind-coordinate policy, and recovery for stale AX/window/menu/dialog state. Load whenever using maccontrol, or…
feishu
Use when the user mentions 飞书 / Feishu / Lark workspace operations: docx (云文档) read/write, bitable (多维表格) records / views / dashboards, drive (云盘) upload/download, wiki (知识库) link resolution, approval (审批) instance create/cancel/query, calendar (日历) event create/list/update + attendees, contact (联系人) user/department…
meeting-notes
Use when the user asks to capture, structure, or summarize meeting notes / call notes / 1:1 discussion / standup notes. Produces a standard template with attendees, agenda, decisions, action items (owner + deadline), and open questions.
ha-settings
Manage Hope Agent application settings through conversation. Use when the user wants to view or change any app configuration: theme, language, enhanced focus indicators, proxy, temperature, notifications, tool timeout, context compaction, automatic session titles, web search, GitHub issue reporting, memory, embedding…