Minutes Sync

PassAudited by ClawScan on May 11, 2026.

Overview

This skill does what it advertises—generates meeting minutes and syncs them to Feishu—but users should review the Feishu helper integration and sharing settings before use.

Install only if you want meeting notes synced to Feishu. Before first use, review the separate feishu-doc helper skill, confirm which Feishu account and folder it uses, and check sharing or ownership settings for any generated document.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The reviewed skill may call code from another local skill; that external helper determines how Feishu authentication, document creation, and network calls actually happen.

Why it was flagged

The skill relies on a local helper script from a separate feishu-doc skill that is not included in the reviewed file manifest.

Skill content
Sync to Feishu using feishu-doc skill

```bash
python3 .claude/skills/feishu-doc/scripts/doc_ctl.py create
Recommendation

Before using sync, verify that the feishu-doc skill and its doc_ctl.py script are installed from a trusted source and have the Feishu permissions you expect.

What this means

If an agent or shell runner interpolates meeting text unsafely, unusual characters in titles or minutes could cause command errors or unintended command behavior.

Why it was flagged

The workflow uses a command-line helper with dynamic title and rendered meeting content. This is expected for Feishu sync, but the arguments come from meeting context and should be passed safely.

Skill content
python3 .claude/skills/feishu-doc/scripts/doc_ctl.py create "会议纪要 - {title} - {date}" --content "<rendered markdown>"
Recommendation

Use safe argument passing where available, review generated titles/content before sync, and avoid blindly executing shell-formatted commands containing untrusted meeting text.

What this means

Documents could be created, shared, or transferred using the Feishu permissions available to the helper skill.

Why it was flagged

The referenced Feishu operations can share documents, transfer ownership, or place documents in folders, which implies use of the user's Feishu account permissions.

Skill content
`--share ou_xxxxx`:分享给指定用户
- `--owner ou_xxxxx`:转移文档所有权
- `--folder fldcnXXX`:指定目标文件夹
Recommendation

Confirm the active Feishu account, target folder, recipients, and any ownership-transfer action before allowing these options.

What this means

Meeting minutes may include confidential discussions, attendees, decisions, owners, and deadlines that will be stored in Feishu.

Why it was flagged

The skill is designed to send generated meeting minutes to an external collaboration provider, Feishu.

Skill content
Auto-syncs to Feishu documents for team collaboration.
Recommendation

Only sync content appropriate for the selected Feishu workspace, and check document access permissions after creation.