Why DingTalk WuKong Is the Top Enterprise AI Agent for OPC

In this article the author, a veteran AI engineer, shares a hands‑on evaluation of DingTalk’s newly released WuKong platform, positioned as an enterprise‑grade AI‑native work platform and the first independent DingTalk app in its 11‑year history.

What is WuKong?

WuKong is described as an AI Agent that can actually perform work within an enterprise environment. Unlike many AI agents that rely on screen‑scraping and simulated mouse clicks, WuKong adopts a CLI‑first approach: DingTalk’s entire product suite—IM, documents, calendars, approvals, meetings, and more—has been refactored into over 10,000 standardized command‑line instructions that the AI can invoke directly.

We smashed DingTalk, rebuilt it with AI, and forged WuKong.

According to DingTalk CEO Chen Hang, this massive engineering effort rewrites the underlying code of a platform serving 800 million users and more than 20 million enterprises.

The CLI‑first design offers higher stability than the “computer‑use” route because it does not break when the UI changes, a critical advantage for enterprise deployments.

WuKong’s ultimate goal is to give every user an AI‑powered team, enabling a single person to accomplish tasks that previously required an entire team—essentially embodying the emerging “OPC” (One‑Person Company) model.

OPC Scenarios Tested

The author conducted four practical experiments to assess WuKong’s OPC potential.

Landing‑page generation for the AI Programming Lab public account. The author fed historical article data to WuKong, which designed and built a landing page with a modern, “Vibe‑style” UI.

Competitor analysis of AI coding tools. WuKong was asked to research Claude Code, Codex, and Gemini CLI, producing a 20‑page PDF report that was later converted to HTML for easier reading. The report demonstrated substantial depth and structured output.

Xiaohongshu content‑operation plan. By installing the “Xiaohongshu Operations Expert” skill, WuKong generated a detailed growth plan aiming to reach 10 k followers in six months, including diagnostics of the current account and actionable steps.

Brand‑image design for the AI Programming Lab IP. Using built‑in design skills, WuKong produced several minimalist brand concepts that showed clear design sense.

Across these tasks, WuKong excelled at multi‑step task decomposition and precise execution of DingTalk native capabilities such as scheduling, document editing, and approval flows.

Behind the Scenes: DingTalk Workspace CLI (dws)

The open‑source CLI tool that first caught the author’s attention is called dws (DingTalk Workspace). Developed in Go, version 1.0.4 covers 12 core DingTalk products and 104 tools, providing native support for Claude Code and Cursor as execution environments. It includes a master skill for intent routing, separate reference docs per product, and 13 pre‑written Python scripts for batch operations like calendar scheduling, CSV import, and attendance statistics.

Security measures in dws include PBKDF2‑derived keys with AES‑256‑GCM encryption, non‑persistent credential storage, path‑traversal protection, and domain‑whitelisting—features that many competing products lack.

WuKong’s Security Architecture

WuKong implements a six‑layer security framework covering identity authentication, sandbox isolation, skill‑level certification, dedicated model deployment, full traceability of Agent actions, and transparent token consumption. All Agent operations run inside a sandbox, leaving immutable logs. The Skill ecosystem only accepts Markdown, prohibiting arbitrary code execution and thus blocking malicious programs at the source.

Strategic Outlook

Alibaba recently created the ATH (Alibaba Token Hub) business group, placing both Qianwen and WuKong under its direct oversight. Future B‑side capabilities from Taobao, Tmall, 1688, Alipay, and Alibaba Cloud are expected to be exposed to WuKong as Skills, positioning WuKong as a unified entry point for Alibaba’s enterprise AI services.

From a product‑strategy perspective, the author agrees that DingTalk’s CLI‑first route is more stable and secure than computer‑use approaches, and that WuKong is best suited for users who have concrete OPC ideas and projects, allowing them to build a one‑person organization that relies on WuKong for daily work.