Security audit
Security checks for vulnerabilities and agentic risk
This is a simple meeting-minutes formatting skill with no code, network access, persistence, or hidden authority.
Installers should expect this skill to summarize meeting content the user provides. Avoid invoking it for generic reminders, personal note-taking, or non-meeting conversations unless you actually want the content converted into meeting minutes.
The manifest description says the skill should be used when the user says phrases like '整理纪要', '出会议记录', and '把会开完的要点记下来'. Several of these are common conversational requests and the file does not provide exclusion conditions or clearer scope boundaries, increasing the chance of accidental activation outside the intended skill context.
The usage guidance is broad and lacks clear negative boundaries, which can cause the skill to activate on ordinary phrases like '帮我记一下' even when the user did not intend structured meeting-minute generation. Misrouting can expose unrelated user content to an overly specialized transformation flow, causing unintended summarization, omission of important context, or processing of sensitive conversation material under the wrong task assumptions.
No suspicious patterns detected.
