全流程会议助理虾

全流程会议助理虾。核心职责：录音转写、提炼待办并分发任务。业务价值：结果闭环——直接将待办指派到人的协作软件中，防止烂尾。 激活场景：用户发送会议录音文件（mp3/m4a/opus/wav/flac 等音频格式），要求转写、记纪要、提炼待办、分发任务。 触发关键词：转写录音、会议纪要、会议记录、提炼待办、会议总结...

Before installing or running this skill, consider the following: - Metadata mismatch: The SKILL.md requires FEISHU_APP_ID/FEISHU_APP_SECRET and a local SenseVoice transcription environment, but the published registry entry lists no required env vars or installs. Ask the publisher to update metadata to list these requirements. - Sensitive credentials: FEISHU_APP_ID/SECRET give the skill the ability to obtain tenant_access_token and read/send messages and access contact lists. Only provide credentials for a purpose-scoped app and review app permissions (im:message:send_as_bot, contact:contact.base:readonly, im:chat). - Data exposure & privacy: Audio may contain sensitive information. Transcripts are written to disk (~./transcripts, ~/.cache/modelscope). Decide whether storing transcripts locally or sending notifications to Feishu is acceptable for your data policy. - Trust the transcription stack: The skill expects to use SenseVoice/FunASR and will download models into ~/.cache/modelscope. Ensure these packages and model sources are trusted and obtained from official releases to avoid malicious binaries. - Plugin dependency: It prefers an internal openclaw-lark plugin if present; otherwise it will call Feishu APIs directly. Confirm presence and integrity of that plugin if you intend to use it. - Test safely: If you proceed, test in an isolated/dev account first (limited-permission Feishu app, non-production audio) to verify behavior and tokens are handled correctly. If the publisher cannot or will not clearly declare required env vars, install steps, and the Feishu app scope, treat the skill as untrusted and avoid providing production credentials.

Type: OpenClaw Skill Name: meeting-assistant-claw Version: 1.0.0 The skill is a legitimate meeting assistant designed to transcribe audio files, summarize content, and distribute tasks via Feishu (Lark). It uses the SenseVoice-Small model for local transcription and provides a clear, multi-step workflow in SKILL.md that includes a mandatory user confirmation step before sending any external messages. While it handles sensitive credentials (FEISHU_APP_ID/SECRET) and executes Python scripts for transcription, these actions are strictly aligned with its stated purpose and use official API endpoints (open.feishu.cn). No evidence of data exfiltration, malicious persistence, or prompt injection was found.