alarm

This skill appears to implement what it claims (Feishu reminders + optional SenseAudio ASR) — but check these before installing: - Provide the required env vars at process start: FEISHU_APP_ID, FEISHU_APP_SECRET, SENSEAUDIO_API_KEY. The registry top-level metadata incorrectly states none are required; that is misleading. The code will fail if those three are not present. - Understand audio upload: any audio passed to create-reminder-audio will be uploaded to the configured SENSEAUDIO_BASE_URL (default https://api.senseaudio.cn). Do not set SENSEAUDIO_BASE_URL to an untrusted host, since audio content and ASR results will be transmitted there. - Review and run the code in an isolated environment: the code makes outbound HTTPS requests (Feishu and ASR) and writes a local SQLite DB (default ./data/reminders.db). Run with least privilege and on infrastructure where storing reminders locally is acceptable. - Confirm dependency installation manually (requests) and pin versions if deploying to production. - Because the package metadata is inconsistent about required env vars and there is runnable code included, audit the included scripts yourself (they are short and readable) before granting it access to real credentials. If you cannot or will not review code and environment values, treat the skill as higher risk because it will transmit audio and use Feishu credentials to send messages.