dingtalk-todo SKILL.md skillA
dingtalk-todo from dingtalk-real-ai/dingtalk-workspace-cli is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add dingtalk-real-ai/dingtalk-workspace-cli/dingtalk-todo@git:20260909.0276792Pins git:20260909.0276792 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- dingtalk-real-ai/dingtalk-workspace-cli
- Path
skills/multi/dingtalk-todo/SKILL.md- Versions recorded
- 6
- Latest version
- git:20260909.0276792, committed Sep 9, 2026
- First version recorded
- Aug 19, 2026
- Size
- 11,661 bytes
- Repository stars
- 3,941
- License
- Apache-2.0
钉钉待办 / TODO。Use when 用户说 创建待办/TODO/任务提醒/指派任务/标记完成/查待办/紧急待办/循环待办/批量建待办/逾期待办。不做日报周报（走 dingtalk-misc）、审批（走 dingtalk-misc）、日程（走 dingtalk-calendar）。命令前缀：dws todo。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 钉钉待办 Skill
## 执行契约
- 执行第一个 `dws` 操作前完整读取 [`dingtalk-shared`](../dingtalk-shared/SKILL.md)；当前任务已加载则不重复读取。
- 先把请求拆成有序步骤，再逐步选入口。已知命令直接执行，不先查 Help、Schema 或 Shortcut Catalog；只有当前 leaf 的 flag 或安全语义确实不明时才查精确 leaf。
- 所有命令加 `--format json`，按结构化业务返回判断结果。后续 ID 只取自本次真实返回；零匹配、多匹配或类型不明时停止并消歧。
- 写操作遵循最终 Runtime gate。需要确认时先说明对象、动作和影响，用户确认后才追加 `--yes`；不要把 `--yes` 写入存储示例。
- 写后必须核验。非幂等写超时、缺少稳定 ID 或读回失败时先查询对账，禁止盲目重放。
<!-- VISIBLE_SHORTCUTS_START -->
## Shortcuts（无专用脚本/recipe 时优先）
以下 shortcut 同时进入公开 catalog 与 Runtime Schema。按本 skill/recipe 路由，命中时 Shortcut 优先于原子命令。参数只查 `dws schema --cli-path "todo +<shortcut>" --compact --jq '{cli_path,parameters,constraints,confirmation}' -f json`；仅需且已发布 `result` 时查 `--jq '{cli_path,outcomes:.result.outcomes,pagination}'`，字段级再查 `data_schema`；缺失不以 Help/样例推断。Schema 不可用才读一次已知 leaf Help；`unknown flag` 用同 leaf Help 修正一次。`unknown command` 禁 Help：错误 suggestion → 已加载 Skill/reference 明确入口；均无则报漂移。禁全 Catalog/root/parent/product Help；仅映射、接口或 provenance 审计省略 `--compact`。现有路由和 reference 均无法定位低频能力时，才用 `dws shortcut list --service todo --format json` 发现。
| Shortcut | 风险 | 适用场景 |
|---|---|---|
| `dws todo +assign` | write | 按姓名给某人创建并指派一条待办（自动解析 userId） |
…Read the whole file at its exact version.
How to install
mdr add dingtalk-real-ai/dingtalk-workspace-cli/dingtalk-todo@sha256:f3a83a0c821cdea7The line at the top of this page pins the label git:20260909.0276792, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_sob6v6xkck4ys4lk)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 6 versions of this file, between Aug 19, 2026 and Sep 9, 2026, about one every 4 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260909.0276792 latest | 2026-09-09 | 0276792 | 11,661 B | A | view · diff |
| git:20260825.bd5eac3 | 2026-08-25 | bd5eac3 | 11,525 B | A | view · diff |
| git:20260825.ca811ac | 2026-08-25 | ca811ac | 11,546 B | A | view · diff |
| git:20260821.b71509d | 2026-08-21 | b71509d | 11,492 B | A | view · diff |
| git:20260819.2052a87 | 2026-08-19 | 2052a87 | 7,618 B | A | view · diff |
| git:20260819.2168cae | 2026-08-19 | 2168cae | 7,613 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (11661 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
dingtalk-real-ai/dingtalk-workspace-cli · 3,941 stars · license Apache-2.0 · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_sob6v6xkck4ys4lk GET https://markdownregistry.com/api/v1/resolve?ref=dingtalk-real-ai/dingtalk-workspace-cli/dingtalk-todo GET https://markdownregistry.com/api/v1/blob/f3a83a0c821cdea73d3fe242e90ba13735b88abe05570b7554b0bdcdac602126
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.