Skills/ClawHub/cue-meeting-minutes-cn

cue-meeting-minutes-cn@0.2.25

CAUTION

Publisher claims: "企业会议纪要：给我会议录音（本地文件，当前实证边界=单件 ≤256MiB（闸按字节不按时长），以通道返回为准）与可选材料，产出五段纪要——基本信息、逐字带时间锚、话题分段（归类是笔记法非原文）、决策与待办每条挂原话锚、待核清单。适合「这段录音整理成纪要」「会是哪几件事谁负责」「纪要逐条对回原话」等场景。Do NOT use for: 实时转写、单件超 256 MiB 的整场录音直投（闸按字节不按时长）、替你把纪要改写成「更漂亮」的版本。Triggers: 会议纪要 / 录音整理 / 谁负责什么 / 待办提取 / 逐字回查； meeting minutes / audio to notes" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher huhoo · joined 2 days agoInstalls 79Last detonated 33 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsCHANGELOG.md:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsCHANGELOG.md:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsCHANGELOG.md:14 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageREADME.md:108 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.en.md:79 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageCHANGELOG.md:111 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.en.md:110 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.en.md:78 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:76 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:77 · npx invocation of non-well-known package — may execute untrusted code
AST06