DingTalk Workspace CLI is a cross-platform command-line tool that brings DingTalk’s product capabilities into one interface. It serves human users and AI agents working with DingTalk enterprise data, with administrator authorization required. Its catalogue add-ons provide agent skills for using the CLI’s product areas.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add DingTalk-Real-AI/dingtalk-workspace-cli --skill dingtalk-aisearchgit clone --depth 1 https://github.com/DingTalk-Real-AI/dingtalk-workspace-cliWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/dingtalk-real-ai/dingtalk-workspace-cli/dingtalk-aisearch)<a href="https://agentmods.dev/skills/dingtalk-real-ai/dingtalk-workspace-cli/dingtalk-aisearch"><img src="https://agentmods.dev/badge/skills/dingtalk-real-ai/dingtalk-workspace-cli/dingtalk-aisearch.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00157 | $0.02268 |
| Opus 5 | $0.00078 | $0.01134 |
| Sonnet 5 | $0.00031 | $0.00454 |
| Haiku 4.5 | $0.00016 | $0.00227 |
Grade A, and why
dingtalk-aisearch scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 103 lines — stays where its author put it; the contents beside it link to each section on GitHub.
钉钉 AI 搜问 Skill
最小 DWS 执行契约
- 只通过
dwsCLI 操作钉钉；每条命令带--format json，只按真实结构化返回下结论。 - 本页已覆盖
person、enterprise、behavior的常用参数，直接执行；不要预读 shared、Reference、Schema、Help 或下游产品 Skill。 - 不猜命令、字段、ID、profile 或时间。多候选不默认取第一项，不把不同 ID 域互相替代。
- 合法空结果是终态；接口失败、分页不完整或来源未核实不能表述为“没有”。
Golden Route
| 意图 | 唯一首选入口 | 关键槽位 |
|---|---|---|
| 姓名/工号/部门/职位/职责/上下级/手机号线索找人 | dws aisearch person |
--query + --dimension |
| 按主题找文档、消息、邮件、待办、听记等内容 | dws aisearch enterprise |
--queries + --types + 可选 --time-range |
| 我/某人发送、收到、创建、编辑或分享过什么 | dws aisearch behavior |
上述内容槽位 + --behavior-type + 可选 --direction/--chat-scope |
| 完整手机号精确反查 | dws contact user search-mobile --mobile "<完整手机号>" --format json |
--mobile |
| 已知稳定 ID 后读取/修改原对象 | 对应产品 Skill | 不再用 AISearch 重搜 |
只要任务仍是“定位记录”，即使只点名邮件、消息或文档，也由 AISearch 完成；不要提前切 Mail、Chat、Doc、Drive、Wiki、Todo、Minutes 或 Report 重做搜索。
1. 人员搜索
维度映射：姓名→name，部门→department，职位/岗位→position，职责/技能/负责人→duty，上级→supervisor，下属→subordinate，工号→jobNumber，手机号线索→phone；确实无法判断维度时才用 all。
dws aisearch person --query "<用户原始目标>" --dimension <维度> --format json
- 用户给出多个独立条件时，每个条件各调用一次并分别汇报；
--query保留完整目标，不截名、不改昵称、不扩同音词。 - 正确维度返回
success=true,result=[]后立即结束该组；不要改用all、半截关键词或其他产品扩搜。只有首选维度本身判断错误时才改正一次，不能把合法空结果当路由错误。 - 从每个候选提取并保留服务端返回的姓名、
userId、openDingTalkId或人员链接。多候选全部列出；用户要求详情时才用真实userId切dingtalk-contact，执行dws contact user get --ids <userId> --format json。 - 用户说“所有候选”但响应没有分页完成证据时，表述为“本次服务返回 N 个候选”，不要虚构全量性。
2. 跨源内容搜索
先从原句拆槽：时间词只进 --time-range，类型词只进 --types，剩余主题只进 --queries。类型枚举：document,im,mail,calendar,todo,minute,report,image,link,notable,baike。
dws aisearch enterprise --queries "<主题>" --types <类型CSV> [--time-range "<用户原始时间词>"] --format json
- 按用户要求的输出分组调用：同一组里的多个类型合并为 CSV；用户明确要求“分别找/按三类”时各组分开调用。不要再按底层产品拆得更细，也不要逐产品加载 Skill 重复搜索。
- 用户给出《精确标题》时，
--queries保留完整标题，只接受标题精确匹配的候选。没有精确命中就停止，不能拿“最接近”、最近项或列表第一项替代，也不能去 Doc/Drive/Wiki 扫描同义词。 - 仅要求列出标题、来源、链接或标识时，到搜索结果为止；不要读取原文。只有用户明确要求打开/读取且已有唯一正确候选时，才提取真实稳定 ID 并加载一个对应产品 Skill。
- 正确搜索的空数组是该条件下无结果；非空但不含精确目标也是“未找到目标”。不要缩短关键词或扩大时间范围，除非用户要求。
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago Changed · +19 lines · +59 tokens per session c930e6743c54
- 8d ago First seen · 84 lines · 98 tokens per session scan A a1044278b69d
dingtalk-aisearch is a skill published in the GitHub repository DingTalk-Real-AI/dingtalk-workspace-cli (2,891 stars, last pushed today), licensed Apache-2.0. It adds 157 tokens to every session and 2,268 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
next-cache-components-optimizer
Drive a Next.js route to instant navigation by setting up an agentic loop, under Cache Components / PPR, on initial load (hard navigation) and client-side navigation (soft navigation). Encode the goal as a failing @next/playwright instant() e2e and work it to green, one verified route at a time; the shipped test then…
next-partial-prefetching-adoption
Turn on Partial Prefetching in a Next.js app and work through the insights it surfaces. Use when the user wants to enable or adopt Partial Prefetching, flip the partialPrefetching flag, opt routes in with export const prefetch = 'partial', audit Link prefetch={true} behavior, preserve existing prefetched UI with…
chronicle
Analyze Copilot session history for standup reports, usage tips, session search, and session reindexing. Use when the user asks for a standup, daily summary, usage tips, workflow recommendations, wants to search or find past sessions by keyword/file/PR, wants to reindex their session store, or asks about deleting…