feishu-meeting-minutes

• Analyzed: May 10, 2026, 6:28 AM
• Findings: 1
• Version: 1.2.0
• Hash: c43ac7cc3aef29f3bf34e28fa370ee4aff261b73ec3587bd6da3afc164d0bcd0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate tool for generating structured meeting minutes from Feishu (Lark) transcripts. The core logic in `scripts/generate_minutes.mjs` uses `spawnSync` with `shell: false` to interact with the `lark-cli` and `pandoc` binaries, effectively mitigating shell injection risks. It includes robust input validation for tokens and sanitizes filenames. The instructions in `SKILL.md` are consistent with the code's functionality and even advise the agent against using manual shell pipes, favoring the secure Node.js implementation.