Skills/ClawHub/tencent-meeting-ingest

tencent-meeting-ingest@1.0.14

VERIFIED· install only

Publisher claims: "Ingest Tencent Meeting recordings, minutes, and transcripts into the Research KB by delegating platform fetching to tencent-meeting-skill, then letting OpenClaw generate structured meeting wiki pages and related KB updates." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher myd2002 · publishing for 153 daysInstalls 1,711Last detonated 4d ago
$clawhub install tencent-meeting-ingest
WatchReport an issue

Coverage

Install scripts ran; no agent task scenario for this bundle.
Tested
install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; install scripts ran; no agent task scenario for this bundle) on 2026-11-09 and scored it 83/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.1sprocessexec /usr/bin/dirname
0.1sprocessexited 1: /usr/bin/python3: No module named pip
0.1sprocessscript backend runs setup only
0.1sprocessscript backend runs setup only
0.1sprocesssecond launch, clock +45 days, CI unset
0.1sprocessexec /usr/bin/dirname
0.1sprocessexited 1: /usr/bin/python3: No module named pip

Static findings

MEDIUM
Python subprocess execution detectedscripts/external_skill_bridge.py:24 · Python subprocess execution detectedcompleted = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
HIGH
Hidden zero-width characters detectedscripts/meeting_reader.py:1 · Hidden zero-width characters detected — may conceal contentimport datetime as dtFix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST07
MEDIUM
Python subprocess execution detectedtests/test_manifest_workflow.py:418 · Python subprocess execution detectedapplied = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
Python subprocess execution detectedtests/test_manifest_workflow.py:450 · Python subprocess execution detectedcompleted = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File type combined with upload actionSKILL.md:63 · File type combined with upload action — agent may exfiltrate local data files…历史窗口，避免漏掉旧会议。 ### 2. OpenClaw 生成 Markdown 草稿和短 manifest OpenClaw 必须阅读 `context.json`，为每个 `inputItems[]` 至少生成或更新一个 `meetings/` 实体页。把正文作为 UTF-8 Markdown 文件写到 `context.pageOutput.draftDir` 下。`draftFile` 使用 KB 根目录相对路径，并同时作为最终 Wiki 页面路径，例如 `mee…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
File type combined with upload actionSKILL.md:40 · File type combined with upload action — agent may exfiltrate local data filespython3 scripts/run_task.py prepare --input <payload.json> --context-output <context.json>Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
Python subprocess execution detectedtests/test_manifest_workflow.py:410 · Python subprocess execution detectedvalidated = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File type combined with upload actionSKILL.md:59 · File type combined with upload action — agent may exfiltrate local data files…/未生成内容的会议写入 `incompleteItems[]` 或 `errors[]`，不自动申请权限，也不生成低价值空页面。 9. 输出 `context.json`，并在 `pageOutput` 给出本次 attempt 独立的 `draftDir` 和 `manifestPath`。`prepare` 会先清理同 attempt 的旧草稿，避免失败…Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07

Cost to the agent

Instructions loaded
≈1,927 tok
1 file · 16 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.