Security audit
Security checks for vulnerabilities and agentic risk
This skill coherently summarizes meeting notes into reports and does not show hidden, destructive, or exfiltrating behavior.
Before installing, be aware that useful operation may require access to Tencent Meeting records or local meeting notes, which can contain sensitive business information. Use it with explicitly chosen meetings or note directories, review generated reports before sharing, and only authorize any tmeet backfill or push action when you intend it.
The phrase "一句话触发" describes activation as possible from a single utterance, but it does not specify exact trigger phrases, constraints, or non-triggering examples. In a skill context, this broad wording can overlap with ordinary user requests about weekly reports or retrospectives and may lead to unintended invocation.
The skill describes file-based operation via scripts/meeting_digest.py --input-dir <dir> and output generation, which implies file read/write capability, but it does not declare any permissions or allowed-tools scope. This weakens least-privilege controls and can lead to overbroad filesystem access if the runtime grants default tool access or if the agent infers it may read arbitrary local notes and write reports without explicit user-approved boundaries.
The trigger phrases are broad, such as generating weekly reports or retrospectives from meetings, and can overlap with common user requests that may not intend to invoke this specific skill. Ambiguous activation can cause the agent to pull meeting notes, transcripts, or local files in contexts where the user only wanted a generic summary, increasing the chance of unnecessary access to sensitive meeting data.
This code file contains natural-language strings that define the skill’s purpose and user interaction entirely in Chinese, including the module docstring and later CLI/help/output text. Under the policy, forcing a specific language without opt-in is a natural-language policy violation unless the locale restriction is explicitly justified, which is not present here.
The natural-language description, trigger phrases, templates, and examples are entirely in Chinese, and the skill does not indicate that users may choose another language or locale. Under the stated policy, forcing a specific language without opt-in is a policy concern unless the locale restriction is explicitly justified.
This markdown file consists entirely of Chinese-language headings and content, and there is no indication that the skill is region-specific or that users can opt into this locale. Under the policy rule for natural-language constraints, forcing a specific language without user choice can be a locale-policy violation.
