Scan Report
5 /100
meeting-secretary
专业的会议秘书技能,用于分析会议转录文本并生成结构化会议纪要
Meeting secretary skill for transcript analysis with no security issues found. The single Python script uses only standard library, performs documented file operations, and has no network access or credential handling.
Safe to install
This skill is safe to use. No action required.
Findings 1 items
| Severity | Finding | Location |
|---|---|---|
| Info | Reference to non-existent scripts | references/best_practices.md:12 |
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | READ | READ | ✓ Aligned | SKILL.md:reads user-provided transcripts; split_long_transcript.py:15-35 reads i… |
| Filesystem | WRITE | WRITE | ✓ Aligned | SKILL.md:documents output to segments/ directory; split_long_transcript.py:200-2… |
| Network | NONE | NONE | — | No socket, urllib, requests imports in script |
| Shell | NONE | NONE | — | No subprocess, os.system, or shell command execution |
| Environment | NONE | NONE | — | No os.environ access or credential enumeration |
| Database | NONE | NONE | — | No database imports or operations |
5 findings
Medium External URL 外部 URL
https://img.shields.io/badge/OpenClaw-Skill-blue README.md:7 Medium External URL 外部 URL
https://openclaw.ai README.md:7 Medium External URL 外部 URL
https://img.shields.io/badge/license-MIT-green README.md:8 Medium External URL 外部 URL
https://img.shields.io/badge/python-3.8+-blue README.md:9 Medium External URL 外部 URL
https://www.python.org README.md:9 File Tree
4 files · 36.4 KB · 1347 lines Markdown 3f · 1071L
Python 1f · 276L
├─
▾
references
│ └─
best_practices.md
Markdown
├─
▾
scripts
│ └─
split_long_transcript.py
Python
├─
README.md
Markdown
└─
SKILL.md
Markdown
Security Positives
✓ Uses only Python standard library - no external dependencies
✓ File operations are parameterized and controlled (input file, output directory)
✓ Error handling present for file operations (try-except blocks)
✓ No network requests or external communications
✓ No credential harvesting or sensitive path access
✓ No base64, eval(), exec(), or other dynamic code execution
✓ No curl|bash or wget|sh remote execution patterns
✓ All functionality is clearly documented in SKILL.md