dify-tool-developer
Facilitates Dify tool plugin development with mandatory documentation and CLI usage for custom tool creation.
Install this skill
Security score
The dify-tool-developer skill was audited on Feb 9, 2026 and we found 26 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 54 | curl -s https://docs.dify.ai/plugin-dev-en/[doc-filename].md |
Curl to non-GitHub URL
| 154 | curl -s https://docs.dify.ai/plugin-dev-en/0222-tool-plugin.md |
Curl to non-GitHub URL
| 166 | curl -s https://docs.dify.ai/plugin-dev-en/0222-debugging-logs.md |
Curl to non-GitHub URL
| 173 | curl -s https://docs.dify.ai/plugin-dev-en/0222-tool-oauth.md |
Curl to non-GitHub URL
| 184 | curl -s https://docs.dify.ai/plugin-dev-en/0221-initialize-development-tools.md |
Curl to non-GitHub URL
| 217 | curl -s https://docs.dify.ai/plugin-dev-en/0222-tool-plugin.md |
Curl to non-GitHub URL
| 281 | curl -s https://docs.dify.ai/plugin-dev-en/0222-tool-plugin.md |
Curl to non-GitHub URL
| 290 | curl -s https://docs.dify.ai/plugin-dev-en/0222-tool-oauth.md |
Curl to non-GitHub URL
| 607 | curl -s https://docs.dify.ai/plugin-dev-en/0222-debugging-logs.md |
Curl to non-GitHub URL
| 652 | curl -s https://docs.dify.ai/plugin-dev-en/0222-debugging-logs.md |
Curl to non-GitHub URL
| 915 | curl -s https://docs.dify.ai/plugin-dev-en/0222-tool-plugin.md |
Curl to non-GitHub URL
| 961 | curl -s https://docs.dify.ai/plugin-dev-en/0222-tool-oauth.md |
Access to .env file
| 261 | - `.env.example` - Environment variables template |
Access to .env file
| 679 | Create/update `.env` file with remote connection: |
Access to .env file
| 684 | cat > .env << EOF |
Prompting for password/secret input
| 474 | type: secret-input |
Prompting for password/secret input
| 977 | type: secret-input |
External URL reference
| 410 | # yield self.create_link_message("https://example.com/result") |
External URL reference
| 483 | en_US: Get your API key from https://example.com/api-keys |
External URL reference
| 484 | zh_Hans: 从 https://example.com/api-keys 获取您的 API 密钥 |
External URL reference
| 485 | url: https://example.com/api-keys |
External URL reference
| 529 | # "https://api.example.com/validate", |
External URL reference
| 664 | 1. REMOTE_INSTALL_URL - e.g., https://your-dify.com or http://localhost:5003 |
External URL reference
| 703 | INFO: Connected to Dify remote host: https://your-dify-instance.com |
External URL reference
| 982 | url: https://provider.com/oauth/authorize |
External URL reference
| 987 | url: https://provider.com/oauth/token |