skill-h-meeting-sync

【会议状态同步后台守护任务】每25分钟由 OpenClaw cron 触发一次。负责同步腾讯会议与各 Gitea 仓库之间的会议状态一致性，处理会议取消、改期、新增三种场景，并定期归档过期会议目录。不处理会议创建（用 skill-a）、会前简报（用 skill-b）、会后纪要（用 skill-c）等场景。

This skill mostly does what it says — scanning Gitea, comparing with Tencent meetings, and updating repo metadata — but there are important caveats you should consider before installing: - Metadata mismatch: The skill requires configuration (GITEA_BASE_URL, GITEA_TOKEN_BOT, AIFUSION_META_REPO, ADVISOR_GITEA_USERNAME) but the registry metadata lists no required env vars. Do not assume no secrets are needed; you must supply a Gitea bot token. - Token scope: The Gitea token must allow reading repository contents and committing/deleting files. Limit the token's scope to only the repositories it needs, or create a dedicated service account with minimal privileges. Review what repos the bot can access before granting write/delete rights. - Review target repo names: env-example uses an IP address for GITEA_BASE_URL (http://43.156.243.152:3000). Confirm the correct base URL and that you are not pointing to an unexpected third party. - Installation safety: setup.sh runs 'pip install -r requirements.txt' (with --break-system-packages). Run it inside a virtualenv or container to avoid modifying system Python packages. - Destructive actions: archive will copy files then delete original files via Gitea API. Confirm the archive policy and backups before allowing the skill to run with a token that has delete rights. - Audit the code and logs: Because the skill writes logs into AIFUSION_META_REPO and may create pending entries there, ensure that META_REPO is correct and you trust the repository used for logs and pending items. - Testing: First run in a read-only test environment or with a read-only token where possible, and manually exercise each command (scan, cancel, reschedule, create-pending, archive) to verify behavior and email payloads without letting it auto-apply changes. If you want to proceed, fix the registry metadata to declare the required env vars and clearly document the minimum token privileges required; otherwise treat this package as requiring manual review and careful deployment.

Type: OpenClaw Skill Name: skill-h-meeting-sync Version: 1.0.2 The skill bundle is a meeting synchronization tool designed to align meeting statuses between Tencent Meeting and Gitea repositories. It includes scripts for scanning active meetings (scan.py), handling cancellations (cancel.py), rescheduling (reschedule.py), and archiving old records (archive.py). The code interacts with the Gitea API using standard practices and includes safety checks, such as preventing the automatic cancellation of meetings that have already passed. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found; the high-privilege file operations (creation/deletion) are consistent with the stated administrative purpose.