Skill

cms-cwork-skils/SKILL

CWork 工作协同原子能力集，覆盖员工搜索、文件上传下载、发送/回复汇报、收发件箱、汇报详情、任务、待办、事项、插件聚合、新消息、已读状态与 AI 问答；适用于“汇报、待办、任务、附件、消息、已读、员工查询”等场景；仅支持 appKey 鉴权并按需加载接口执行组合调用。

○ declared by the publisher, as-is
Safety
BB: 4 or more lows, or any medium1 severity-bearing · 63 informational
Reliability & Quality
n/anot assessed
Cost
n/anot assessed
Popularity
n/anot assessed
Performance tested for◌ not assessed
no controlled task evaluation on this release
Repo◌ not assessed
· context signals ↓
Vettd Note

No Vettd note yet for this asset.

Best for

Not for

Re-assessed 3mo ago · 1 of 7 categories assessed
Record lookup
$ vettd directory view a099c067-f8c3-4560-a469-010d5227e3fa

◌ Vettd does not install assets; this record describes a copy you obtain yourself.

Custody chain○ no source link recorded
Unknown author ◐repo △ not assessedversion = △ no commit pinnedsha256:cmro…szi4 ◐ signature △ not assessedlicense △ none declaredrecord a099c067-f8c3-4560-a469-010d5227e3fa · live
◌ public recordYou are signed out, so you see the record and nothing else. sign in
Evidence · 1 of 7 categories · 64 signals
Safety● gradedBmost recent 3mo ago64 signalsrecord a099c067-f8c3-4560-a469-010d5227e3fa
how it was established64 signals · vettd · scan
vettd directory view a099c067-f8c3-4560-a469-010d5227e3fa --json
show
References external URL — review for indirect prompt injection riskflaggedExternal URL(s) detected in SKILL.md — referenced content can change after auditvettd · scan · 3moMedium
Structured output formatflaggedscripts/plan-create/create-simple.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
CLI help supportedflaggedscripts/report-detail/get-info.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
CLI help supportedflaggedscripts/report-query/get-unread-list.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
SKILL.md body length is reasonableflagged227 lines (recommended: under 500)vettd · scan · 3moInfo
Structured output formatflaggedscripts/report-message/find-my-new-msg-list.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
Structured output formatflaggedscripts/tasks/get-page.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
CLI help supportedflaggedscripts/todos/complete.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
Structured output formatflaggedscripts/file-service/get-download-info.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
CLI help supportedflaggedscripts/outbox/get-list.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
Structured output formatflaggedscripts/plugin-report/get-list.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
Structured output formatflaggedscripts/plugin-report/get-unread-list.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
CLI help supportedflaggedscripts/report-message/find-my-new-msg-list.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
CLI help supportedflaggedscripts/plan-create/create-simple.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
CLI help supportedflaggedscripts/report-write/submit.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
Description within character limitflagged136/1024 characters usedvettd · scan · 3moInfo
Description lacks usage contextflaggedAdd context like "Use this skill when..." to help agents know when to activate itvettd · scan · 3moInfo
CLI help supportedflaggedscripts/ai-qa/ask-sse.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
CLI help supportedflaggedscripts/employee-service/get-org-info.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
Structured output formatflaggedscripts/file-service/upload-file.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
CLI help supportedflaggedscripts/inbox/get-list.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
Structured output formatflaggedscripts/report-message/read-report.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
CLI help supportedflaggedscripts/tasks/get-simple-plan-and-report-info.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
CLI help supportedflaggedscripts/todos/list-created-feedbacks.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
No repository linkflaggedNo repository field found in SKILL.md frontmatter. Skills without a verifiable source repository cannot be externally audited.vettd · scan · 3moInfo
Structured output formatflaggedscripts/tasks/get-simple-plan-and-report-info.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
Structured output formatflaggedscripts/user-search/search-emp.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
No secrets or unsafe code patterns detectedflaggedScanned all files for credentials, private keys, and code-level risks (eval, shell exec, destructive ops)vettd · scan · 3moInfo
Valid name fieldflaggedName "cms-cwork-skils" follows spec (lowercase, hyphens, ≤64 chars)vettd · scan · 3moInfo
Structured output formatflaggedscripts/report-detail/get-info.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
Structured output formatflaggedscripts/todos/list-created-feedbacks.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
SKILL.md presentflaggedRequired skill definition file foundvettd · scan · 3moInfo
No evaluation test casesflaggedAdd an evals/ directory with test prompts and expected outputs to measure skill qualityvettd · scan · 3moInfo
CLI help supportedflaggedscripts/file-service/upload-file.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
Structured output formatflaggedscripts/report-write/submit.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
Structured output formatflaggedscripts/report-query/get-unread-list.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
CLI help supportedflaggedscripts/report-message/read-report.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
CLI help supportedflaggedscripts/report-query/get-todo-list.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
CLI help supportedflaggedscripts/tasks/get-page.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
Structured output formatflaggedscripts/ai-qa/ask-sse.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
Structured output formatflaggedscripts/outbox/get-list.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
Structured output formatflaggedscripts/report-query/get-todo-list.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
Structured output formatflaggedscripts/report-write/reply.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
Structured output formatflaggedscripts/todos/complete.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
CLI help supportedflaggedscripts/todos/get-list.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
scripts/ directory presentflaggedBundled executable scripts foundvettd · scan · 3moInfo
CLI help supportedflaggedscripts/file-service/get-download-info.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
Structured output formatflaggedscripts/inbox/get-list.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
CLI help supportedflaggedscripts/plugin-report/get-latest-list.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
Structured output formatflaggedscripts/plugin-report/get-latest-list.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
CLI help supportedflaggedscripts/plugin-report/get-list.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
No prompt injection or jailbreak signals detectedflaggedScanned text content for instruction override, jailbreak framing, credential solicitation, and embedded injection markersvettd · scan · 3moInfo
Step-by-step workflow foundflaggedStructured procedures improve reliability for complex tasksvettd · scan · 3moInfo
Progressive disclosure usedflaggedSKILL.md body references files in references/, scripts/, or assets/ — agents can load additional context on demand instead of consuming everything upfrontvettd · scan · 3moInfo
CLI help supportedflaggedscripts/plugin-report/get-unread-list.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
CLI help supportedflaggedscripts/report-query/is-report-read.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
Structured output formatflaggedscripts/todos/get-list.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
Examples includedflaggedFound code blocks, input/output samples, or an examples section — concrete samples help agents pattern-match effectivelyvettd · scan · 3moInfo
Structured output formatflaggedscripts/employee-service/get-by-person-ids.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
Structured output formatflaggedscripts/employee-service/get-org-info.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
CLI help supportedflaggedscripts/user-search/search-emp.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
CLI help supportedflaggedscripts/employee-service/get-by-person-ids.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
Structured output formatflaggedscripts/report-query/is-report-read.py: Uses JSON/CSV output which is easily parseable by agentsvettd · scan · 3moInfo
CLI help supportedflaggedscripts/report-write/reply.py: Script documents its interface via --help or argument parsingvettd · scan · 3moInfo
Reliability & Quality◌ not assessednot assessed0 signalsrecord a099c067-f8c3-4560-a469-010d5227e3fa
how it was establishednot assessed; no producer has emitted into this category
vettd directory view a099c067-f8c3-4560-a469-010d5227e3fa --json
Not assessed; no producer has emitted into reliability & quality for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
Performance◌ not assessednot assessed0 signalsrecord a099c067-f8c3-4560-a469-010d5227e3fa
how it was establishednot assessed; no producer has emitted into this category
vettd directory view a099c067-f8c3-4560-a469-010d5227e3fa --json
Not assessed; no producer has emitted into performance for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
Cost◌ not assessednot assessed0 signalsrecord a099c067-f8c3-4560-a469-010d5227e3fa
how it was establishednot assessed; no producer has emitted into this category
vettd directory view a099c067-f8c3-4560-a469-010d5227e3fa --json
Not assessed; no producer has emitted into cost for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
Compatibility◌ not assessednot assessed0 signalsrecord a099c067-f8c3-4560-a469-010d5227e3fa
how it was establishednot assessed; no producer has emitted into this category
vettd directory view a099c067-f8c3-4560-a469-010d5227e3fa --json
Not assessed; no producer has emitted into compatibility for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
Popularity◌ not assessednot assessed0 signalsrecord a099c067-f8c3-4560-a469-010d5227e3fa
how it was establishednot assessed; no producer has emitted into this category
vettd directory view a099c067-f8c3-4560-a469-010d5227e3fa --json
Not assessed; no producer has emitted into popularity for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
Characteristics◌ not assessednot assessed0 signalsrecord a099c067-f8c3-4560-a469-010d5227e3fa
how it was establishednot assessed; no producer has emitted into this category
vettd directory view a099c067-f8c3-4560-a469-010d5227e3fa --json
Not assessed; no producer has emitted into characteristics for this asset. That is different from a check that ran and found nothing, which the record would carry as a row of its own.
Coverage1 of 7 categories assessed · shown
Safety
✓ assessed
assessed as findings and a letter grade, not as signals
Reliability & Quality
△ not assessed
no producer has emitted for this category
Performance
△ not assessed
no producer has emitted for this category
Cost
△ not assessed
no producer has emitted for this category
Compatibility
△ not assessed
no producer has emitted for this category
Popularity
△ not assessed
no producer has emitted for this category
Characteristics
△ not assessed
no producer has emitted for this category
Freshness & re-evaluation
assessed3mo ago · Vettd core○ untracked
source stateThis asset is not yet covered by scheduled change detection.
re-check policyno re-check is scheduled for this assetnot scheduled
re-run whena new release ships, the upstream source changes, or the scanner ruleset is revisednot scheduled
Limitations & open conflicts
limitationReliability & Quality, Performance, Cost, Compatibility, Popularity, Characteristics are not assessed: behaviour there is unmeasured, not clean△ gap
conflictno two sources report the same quantity on this record
Verify: does this record describe your copy?
What record a099c067-f8c3-4560-a469-010d5227e3fa covers
scannerv1△ superseded by v11
validityassessed 3mo ago · Staleness unknown
$ vettd scan folder <path>
this record was taken at digest sha256:cmrodgpfr0d5… compare it against the digest your own scan prints
Reproduce: re-run the evidence yourself
$ vettd scan folder /path/to/your/copy
runs the same scanners against your own copy; the published record is never overwritten
How this record comparesagainst other published records · full comparison →
Signal kinds
▲ finding: something to act on, carries a severity● measurement: a reproducible quantityƒ estimate: inferred from a sample▪ fact: read directly off the artifact◆ classification: assigned from a taxonomy◌ nothing found: a producer looked and emitted no object◇ context only: described, never graded
Custody marks
◐ computed by vettd○ declared by the publisher, as-is△ not assessed: nothing looked
$ vettd directory view a099c067-f8c3-4560-a469-010d5227e3fa --jsonas JSON ↗