skill-a-create-meeting

【会议创建总入口，必须优先触发】当用户提出任何新建会议、开会、约会、安排会议、预约会议、组会、周会、例会、讨论会、紧急会议、跨项目会议、循环会议相关需求时，必须优先使用此技能，而不要直接调用 tencent-meeting-skill。OpenClaw 负责意图分析和参数补全；本技能作为会议创建总控入口，负责协调...

This skill appears to implement what it claims (creating meeting folders in Gitea and building invitation content) but there are important red flags you should address before installing or running it: - Metadata vs reality: The skill package declares no required env vars, but the code requires GITEA_BASE_URL, GITEA_TOKEN_BOT, and AIFUSION_META_REPO. Do not assume the platform will prompt you for these — the skill expects them in ~/.config/skill-a-create-meeting/.env. - Inspect and edit env-example: The provided env-example sets GITEA_BASE_URL to an explicit IP (http://43.156.243.152:3000). Change this to your trusted Gitea instance or remove the example before creating the .env. If you leave it pointing to a third-party server and supply a token, that token could be used against that server. - Limit credential scope: If you create a bot token for this skill, give it the minimal permissions needed (only the repos it should touch). Avoid using a token with broad org/admin privileges. - Run setup/install in isolation: The included setup.sh runs 'pip install' system-wide with --break-system-packages. Prefer creating a dedicated virtualenv or container and inspect requirements.txt before installing. - Review file writes: The skill will create files in the target repo (meetings/... meta.yaml/agenda.md) and append logs to the configured meta repo. Make sure the target repo and meta repo are correct and trusted. - Test with non-privileged token and a test repository first: Validate behavior on a throwaway repo and verify no unexpected outbound connections. Search the code for any hard-coded endpoints (the env-example was already suspicious). If you cannot verify or are uncomfortable editing the env file, treat this skill as untrusted until the above issues are resolved.

Type: OpenClaw Skill Name: skill-a-create-meeting Version: 1.0.1 The skill bundle is a legitimate meeting management tool designed to orchestrate workflows between Gitea, Tencent Meeting, and SMTP services. The core logic in `scripts/create_meeting.py` and `scripts/gitea_utils.py` automates the creation of meeting directories, agenda files, and metadata within Gitea repositories using a configured bot token. The `SKILL.md` file provides clear orchestration instructions for the AI agent to ensure a specific execution order (Intent Analysis -> Meeting Creation -> Gitea Documentation -> Email Notification). While the skill handles sensitive data like Gitea tokens and user emails, its behavior is transparent, well-documented, and strictly aligned with its stated purpose. An example Gitea instance is referenced at http://43.156.243.152:3000.