Meeting Minutes Task Extractor

Free basic version that extracts actionable tasks from meeting minutes. Reserves premium upgrade hooks for deeper action decomposition and project tracker ex...

Security Scan

The skill's code and instructions are consistent with a simple meeting-minutes → task extractor; it has no required credentials or installers and does not perform unexpected network I/O, though it includes optional payment URL hooks controlled by environment variables.

Purpose & Capability

Name/description match the included code: the Python script extracts tasks from meeting notes and exposes a free/premium UX. There are no unrelated required binaries, credentials, or config paths.

Instruction Scope

SKILL.md instructs running the included script and tests only. The runtime code reads an optional input file or JSON and returns results; it does not access arbitrary system files. It does construct a payment_url from optional SKILLPAY_* env vars and returns it in the 'upgrade' payload — this is expected for a premium-upgrade hook but means an environment-controlled URL (and user_id query param) may appear in outputs.

Install Mechanism

No install spec and no downloads — instruction-only with included scripts. Nothing is written to disk beyond running the provided scripts, so install risk is low.

Credentials

No required environment variables are declared. The code optionally reads SKILLPAY_PAYMENT_URL_TEMPLATE and SKILLPAY_TOPUP_BASE_URL to build a payment URL; references mention SKILLPAY_API_KEY for a separate billing contract, but that key is not used by the script. Optional env vars are proportionate to the declared premium upgrade behavior, but if set they influence output.

Persistence & Privilege

always:false and no persistent/system-wide changes. The skill does not modify other skills or request permanent presence. Autonomous invocation is allowed (default) but is not combined with any other red flags.

Assessment

This skill appears to do what it says: extract up to 5 actionable tasks from meeting notes. Before installing or running it, consider: 1) The script will include an 'upgrade.payment_url' in its output if SKILLPAY_* environment vars are set — avoid pointing those vars to untrusted domains and avoid exposing sensitive user_id values in query strings. 2) The references file documents a billing API and mentions keeping API keys in environment variables, but the shipped script does not call any billing endpoint or require an API key. 3) Run the provided unit tests locally (python3 -m unittest ...) to confirm behavior in your environment. If you plan to set up the premium/payment hooks, review any target endpoint and do not store secret keys in code or logs.

Value

• Free tier: extract up to 5 actionable tasks with assignee/due-date hints.
• Premium tier (reserved): extract up to 20 tasks, milestone decomposition, and tracker export.

Input

• user_id
• meeting_title
• meeting_notes
• optional tier (free/premium)

Run

python3 scripts/meeting_minutes_task_extractor.py \
  --user-id user_002 \
  --meeting-title "增长周会" \
  --meeting-notes "由小王负责落地页改版，截止2026-03-08"

Tests

python3 -m unittest scripts/test_meeting_minutes_task_extractor.py -v