Environment variable access combined with network send.
Critical
- Code
- suspicious.env_credential_access
- Location
- dist/index.js:654
- Evidence
const envValue = normalizeOptionalSecretString(process.env[ref.id]);
Security audit
DingTalk
Security checks for vulnerabilities and agentic risk
Overview
The DingTalk plugin is a coherent chat integration, but it should be reviewed because it enables broad host-callable messaging and document Gateway actions by default.
Review the Gateway RPC settings before installing. If you do not need DingTalk document APIs or proactive sending, disable them; otherwise configure allowedSpaceIds and allowedTargets. Also prefer allowlist or pairing policies for chats and restrict media downloads/paths where sensitive workspace files or private networks are present.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.env_credential_access