会议智脑（MeetingOS）
v1.0.9Auto meeting notes and action item execution loop. Trigger this skill whenever the user mentions meeting notes, meeting summary, action items, follow-up, tra...
⭐ 0· 106·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (meeting notes, action items, pushing to Feishu/WeCom/Notion, local or cloud transcription) match the included scripts. The env vars documented in SKILL.md (Feishu, WeCom, Notion, OpenAI, SkillPay, privacy flags) are exactly those used by the code. One minor inconsistency: the registry metadata declared no required environment variables, while SKILL.md documents a set of optional/conditional env vars — but those are optional and appropriate for the listed integrations.
Instruction Scope
SKILL.md and the code focus on fetching recordings, transcribing (local Whisper or OpenAI cloud), extracting action items, and optionally pushing results to Feishu/WeCom/Notion and charging via SkillPay. The document also contains developer-facing steps (GitHub issue template, search-for-keys guidance) which are not runtime instructions for the agent. The runtime instructions do not ask the agent to harvest unrelated system files; they do require the user to provide .env variables for integrations.
Install Mechanism
This is an instruction-only skill with bundled Python scripts and a requirements.txt; installation is the ordinary pip install -r requirements.txt and installing ffmpeg. No arbitrary binary downloads or obscure installers are used. As usual, review requirements.txt before pip installing to confirm there are no unexpected packages.
Credentials
The environment variables documented (FEISHU_*, WECOM_*, NOTION_*, OPENAI_API_KEY, SKILLPAY_*) are proportional to the optional integrations implemented. All integration calls are optional and guarded by checks for the corresponding env vars. Users should however note: (1) OPENAI_API_KEY enables cloud transcription (data leaves the machine), (2) SKILLPAY_API_KEY will cause outbound billing calls to skillpay.me, and (3) download_from_url accepts arbitrary URLs (the skill will fetch remote files if given). The registry manifest not listing these optional env vars may be confusing for users.
Persistence & Privilege
Skill is not marked always:true and does not attempt to modify other skills or global agent settings. It can make network requests when integrations are configured, which is expected for its purpose. Autonomous invocation is allowed (platform default) but not combined here with any other high-risk privilege.
Assessment
This skill appears to do what it says, but review before enabling: 1) Keep real API keys out of uploaded files — store them only in a local .env and never paste them into web forms. 2) Run in MEETINGOS_PRIVACY_MODE=local if you don't want audio sent to OpenAI; only set OPENAI_API_KEY if you accept cloud transcription. 3) Inspect requirements.txt before pip installing to check third-party dependencies. 4) Only provide FEISHU_/WECOM_/NOTION_ keys for services you control; the skill will use them to send messages and create pages. 5) Be aware download_from_url can fetch arbitrary URLs — avoid passing untrusted links. 6) If you plan to enable SkillPay billing, confirm the SKILLPAY endpoint and trustworthiness of the SKILLPAY_API_KEY. If you want extra assurance, run the scripts in an isolated environment (container/VM) and scan network calls during a test run.Like a lobster shell, security has layers — review code before you run it.
automationvk97f4x30sw5d3t1d73n2mhd2ad83ay4tchinesevk97f4x30sw5d3t1d73n2mhd2ad83ay4tenterprisevk97f4x30sw5d3t1d73n2mhd2ad83ay4tfeishuvk97f4x30sw5d3t1d73n2mhd2ad83ay4tlatestvk97f4x30sw5d3t1d73n2mhd2ad83ay4tlinearvk97f4x30sw5d3t1d73n2mhd2ad83ay4tmeetingvk97f4x30sw5d3t1d73n2mhd2ad83ay4tnotionvk97f4x30sw5d3t1d73n2mhd2ad83ay4tproductivityvk97f4x30sw5d3t1d73n2mhd2ad83ay4ttranscriptionvk97f4x30sw5d3t1d73n2mhd2ad83ay4twecomvk97f4x30sw5d3t1d73n2mhd2ad83ay4t
License
MIT-0
Free to use, modify, and redistribute. No attribution required.