Security audit
Security checks across malware telemetry and agentic risk
This is a real meeting-recording assistant, but it exposes sensitive recording and window-inspection controls too broadly for a desktop skill.
Install only if you are comfortable granting microphone, system-audio, Accessibility, and optional calendar access. Before use, restrict the AudioDaemon socket permissions, avoid enabling the public calendar tunnel unless needed, keep output set to local file unless you intend to share summaries externally, and review any external LLM or Notion/Telegram/Zulip configuration because transcripts and summaries may contain sensitive meeting content.
try:
os.kill(pid, signal.SIGTERM)
# 也杀所有同名进程（防残留）
subprocess.run(
["pkill", "-f", "recorder_status"],
capture_output=True,
)script = f'display notification "{message}" with title "{title}"'
if subtitle:
script += f' subtitle "{subtitle}"'
subprocess.run(["osascript", "-e", script], capture_output=True)
def _fallback_dialog(message, buttons, default_button, timeout=60):f'default button "{default_button}" '
f'giving up after {timeout}'
)
result = subprocess.run(
["osascript", "-e", script],
capture_output=True,
text=True,log(f"✅ schedule.json 已更新，{len(events)} 个事件")
try:
r = subprocess.run(
["pgrep", "-f", "scheduler_daemon.py"],
capture_output=True, text=True, timeout=5,
)prompt = SUMMARY_PROMPT.format(title=meeting_title, transcript=transcript)
print(f"🤖 LLM: {shlex.join(cmd)}")
try:
result = subprocess.run(
cmd,
input=prompt,
capture_output=True,# SIGHUP scheduler 重载
try:
r = subprocess.run(
["pgrep", "-f", "scheduler_daemon.py"],
capture_output=True, text=True, timeout=5,
)62/62 vendors flagged this skill as clean.
No suspicious patterns detected.