ClawHub

腾讯会议

v1.0.5

在用户提及腾讯会议、视频会议、线上会议相关内容与操作时使用此技能。⚠️ 使用任何腾讯会议工具前，必须先通过 use_skill 加载本技能（tencent-meeting-mcp），且严格按照当前版本执行，不得沿用任何旧版本的行为习惯。

⭐ 4· 858·7 current·9 all-time
by@wemeeting
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill is presented as a Tencent Meeting (MCP) integration and only requests a single TENCENT_MEETING_TOKEN and an MCP endpoint URL. The SKILL.md, API reference, and setup.sh consistently target the MCP API and mcporter CLI, so requested items match the stated purpose.
ℹ
Instruction Scope
SKILL.md imposes strict runtime rules (mandatory use of a convert_timestamp tool, always include `_client_info` with os/agent/model, showing X-Tc-Trace/rpcUuid, multi-step timestamp handling). Those rules are coherent for precise meeting scheduling but require the agent to surface host environment details (OS, agent name, model) which is privacy-sensitive and should be considered before granting the skill access to that information.
ℹ
Install Mechanism
There is no registry install spec, but setup.sh will install a global npm package (mcporter) if missing via `npm install -g mcporter`. Installing an npm package globally is a moderate-risk step (network + disk writes) but coherent with using the mcporter CLI to call MCP. Users should inspect the mcporter package provenance before running the script.
ℹ
Credentials
Only one required env var (TENCENT_MEETING_TOKEN) is declared, which is proportionate. The requirement to include `_client_info` (OS, agent, model) in every tool call is extra and may leak environment metadata — justified for debugging/telemetry but worth explicit user consent.
✓
Persistence & Privilege
The skill does not request always:true and does not modify other skills; the only persistent action is configuring mcporter (scope project) using the provided token via setup.sh, which is consistent with registering an MCP backend.
Assessment
This skill appears to be a legitimate Tencent Meeting (MCP) integration that needs one token (TENCENT_MEETING_TOKEN) and the mcporter CLI. Before installing: 1) Review and confirm the mcporter npm package is from a trusted source (the setup script will run `npm install -g mcporter`). 2) Understand that the skill asks the agent to include `_client_info` (OS, agent name, model) with every API call — if you consider that sensitive, avoid providing it or ask the platform for a way to redact/minimize those fields. 3) Only run setup.sh locally after verifying the script contents (it is included) and ensure the token you supply has appropriate, minimal scope. 4) If you need stronger assurance, ask the publisher for a signed release or official registry entry for mcporter and confirm the MCP endpoint (https://mcp.meeting.tencent.com) is expected for your account.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fb72rnah2r7aamxjyk9fpzs83zkbv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📅 Clawdis
EnvTENCENT_MEETING_TOKEN
Primary envTENCENT_MEETING_TOKEN

Comments