Skills/ClawHub/cue-meeting-minutes-cn

cue-meeting-minutes-cn@0.2.26

VERIFIED

Publisher claims: "企业会议纪要：给我会议录音（本地文件，当前实证边界=单件 ≤256MiB（闸按字节不按时长），以通道返回为准）与可选材料，产出五段纪要——基本信息、逐字带时间锚、话题分段（归类是笔记法非原文）、决策与待办每条挂原话锚、待核清单。适合「这段录音整理成纪要」「会是哪几件事谁负责」「纪要逐条对回原话」等场景。Do NOT use for: 实时转写、单件超 256 MiB 的整场录音直投（闸按字节不按时长）、替你把纪要改写成「更漂亮」的版本。Triggers: 会议纪要 / 录音整理 / 谁负责什么 / 待办提取 / 逐字回查； meeting minutes / audio to notes" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher huhoo · joined 4 days agoInstalls 130Last detonated 1 h ago
$clawhub install cue-meeting-minutes-cn
WatchReport an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-26 and scored it 80/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
npx invocation of non-well-known packageREADME.md:77 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
npx invocation of non-well-known packageREADME.en.md:78 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
npx invocation of non-well-known packageREADME.en.md:110 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
npx invocation of non-well-known packageREADME.en.md:79 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
npx invocation of non-well-known packageCHANGELOG.md:120 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
npx invocation of non-well-known packageREADME.md:108 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
npx invocation of non-well-known packageREADME.md:76 · npx invocation of non-well-known package — may execute untrusted codeFix: Pin versions and sources; vendor anything fetched at install time.
AST06