Skip to content
skillsafebeta
← Report library
Purpose / Other

Lark Workflow Meeting Summary Skill Security Audit

What the author says it does (original text)

会议纪要整理工作流：汇总指定时间范围内的会议纪要并生成结构化报告。当用户需要整理会议纪要、生成会议周报、回顾一段时间内的会议内容时使用。

Independent security check

Security risks found

Files checked
1
Risks found
3
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Medium risk

Raw meeting transcripts are persisted in the local workspace

Source references: 3
What we found

The Minutes fallback explicitly downloads transcripts into the relative `./transcripts` directory and states that they are written to disk. No retention period, cleanup step, or file-access restriction is specified.

Why this matters

Transcripts may contain business plans, personal information, or other sensitive speech. If retained in a shared workspace, backup, index, or location accessible to later tools, meeting content could be read beyond this summarization task.

The source supports this risk, but only when note_id is absent, minute_token exists, and the Minutes fallback is used. The command writes a transcript containing original speech into ./transcripts in the workspace. No retention period, cleanup, or file-access controls are stated, so a shared or persistent workspace could expose sensitive meeting content. A user can ask about file permissions and cleanup, or restrict the download location and retention period.

SKILL.md:85In the instructionsOpen original file
> ```bash> # --minute-tokens 是复数形式（+download 同）；--output-dir 只接受相对路径> lark-cli minutes +detail --minute-tokens "<minute_token>" --transcript --output-dir ./transcripts --as user> ```>> 逐字稿会落盘，供 Step 4 基于原始发言独立提炼（不要照搬 AI 总结）。若返回 `No read permission`（`2091005`），先把无权限事实告知用户，用户明确同意后再用单数 flag 申请：`lark-cli minutes +apply-permission --minute-token "<minute_token>" --perm view --as user`；申请需 owner 在客户端批准后才可重试。详见 [基于 minute_token 查询妙记及关联产物](../lark-meeting/scenes/query-minutes-and-artifacts.md)。
Show 2 other places
SKILL.md:82In the instructionsOpen original file
> **妙记备选路径（无 `note_id`、有 `minute_token` 时）**：智能纪要与妙记是两条独立产物链路，缺少智能纪要不代表这场会没有内容。>
SKILL.md:89In the instructionsOpen original file
>> 逐字稿会落盘，供 Step 4 基于原始发言独立提炼（不要照搬 AI 总结）。若返回 `No read permission`（`2091005`），先把无权限事实告知用户，用户明确同意后再用单数 flag 申请：`lark-cli minutes +apply-permission --minute-token "<minute_token>" --perm view --as user`；申请需 owner 在客户端批准后才可重试。详见 [基于 minute_token 查询妙记及关联产物](../lark-meeting/scenes/query-minutes-and-artifacts.md)。
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.Risks found: 1
Low risk

Append mode makes a lasting change to an existing cloud document

Source references: 2
What we found

The optional output step provides `docs +update --command append`, which writes generated content directly into a selected document instead of producing only a local preview.

Why this matters

If the wrong document URL/token is supplied or the generated text has not been reviewed, the summary could pollute the wrong document or disclose sensitive meeting information to that document's existing collaborators.

The source provides an active append command that persistently changes an existing cloud document. However, the step is explicitly optional and applies only when the user requests document generation, so it is not a default or inherently unauthorized write. Before choosing append, the user can require confirmation of the target URL/token, content, and editor access, and request a preview to reduce the risk of modifying the wrong document or exposing meeting information.

SKILL.md:112In the instructionsOpen original file
### Step 5: 生成文档（可选，用户要求时）阅读 [`../lark-doc/SKILL.md`](../lark-doc/SKILL.md) 学习云文档技能。```bashlark-cli docs +create --doc-format markdown --content $'<title>会议纪要汇总 (<start> - <end>)</title>\n<内容>'# 或追加到已有文档lark-cli docs +update --doc "<url_or_token>" --command append --doc-format markdown --content $'<内容>'```
Show 1 other places
SKILL.md:118In the instructionsOpen original file
lark-cli docs +create --doc-format markdown --content $'<title>会议纪要汇总 (<start> - <end>)</title>\n<内容>'# 或追加到已有文档lark-cli docs +update --doc "<url_or_token>" --command append --doc-format markdown --content $'<内容>'```
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.Risks found: 1
Low risk

Optional features expand Lark authorization under the user's identity

Source references: 3
What we found

Basic lookup requests the `vc` domain; reading note bodies or generating documents adds `drive`; the Minutes fallback adds `minutes`. Operations are performed as the user.

Why this matters

After extra domains are approved, the CLI can access more sensitive documents or Minutes content than the meeting list alone. An untrusted local CLI, dependency skill, or execution environment would therefore have a larger account-data exposure surface. The provided evidence does not show credential transmission.

The source explicitly adds vc, drive, and minutes authorization domains as features require and limits execution to the user identity. The risk is broader account access when reading document bodies, creating documents, or using the Minutes fallback. This is disclosed and function-related, not hidden privilege escalation. Users can authorize only the domains needed for the current task and ask for exact scope and revocation details. Access to a restricted minute also requires disclosure, explicit user consent, and owner approval.

SKILL.md:22In the instructionsOpen original file
仅支持 **user 身份**。执行前确保已授权：```bashlark-cli auth login --domain vc        # 基础（查询+纪要）lark-cli auth login --domain vc,drive   # 含读取纪要文档正文、生成文档lark-cli auth login --domain vc,drive,minutes  # 含无 note_id 时的妙记备选路径```
Show 2 other places
SKILL.md:86In the instructionsOpen original file
> # --minute-tokens 是复数形式（+download 同）；--output-dir 只接受相对路径> lark-cli minutes +detail --minute-tokens "<minute_token>" --transcript --output-dir ./transcripts --as user> ```
SKILL.md:89In the instructionsOpen original file
>> 逐字稿会落盘，供 Step 4 基于原始发言独立提炼（不要照搬 AI 总结）。若返回 `No read permission`（`2091005`），先把无权限事实告知用户，用户明确同意后再用单数 flag 申请：`lark-cli minutes +apply-permission --minute-token "<minute_token>" --perm view --as user`；申请需 owner 在客户端批准后才可重试。详见 [基于 minute_token 查询妙记及关联产物](../lark-meeting/scenes/query-minutes-and-artifacts.md)。
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

4 instruction sections

The Skill searches Lark meetings for a requested date range under the user's identity, follows pagination to collect meeting IDs, retrieves associated notes and document metadata, and produces a daily or multi-day summary.

View source
SKILL.md:58In the instructionsOpen original file
# page-size 最大为 30lark-cli vc +search --start "<YYYY-MM-DD>" --end "<YYYY-MM-DD>" --format json --page-size 30```- 时间范围拆分：搜索的时间范围最大为 1 个月。搜索更长时间范围的会议，需要拆分为多次时间范围为一个月查询。- `--end` 为**包含当天**的日期（即查"今天"时 start 和 end 都填今天）- `--format json` 输出 JSON 格式，你更佳擅长解析 JSON 数据。- `--page-size 30` 每页最多 30 条。- 有 `page_token` 时必须继续翻页，收集所有 `id` 字段（meeting-id）
SKILL.md:72In the instructionsOpen original file
# 首先获取 note_id 和 minute_tokenlark-cli vc +detail --meeting-ids "id1,id2,...,idN"# 然后用 note_id 获取文档 tokens（如有多个需分别获取）lark-cli note +detail --note-id "note_id"```

When no note ID exists but a Minutes token is available, the Skill downloads the transcript. If read access is missing, it requires informing the user and obtaining explicit consent, and the content owner must still approve the request in the client.

View source
SKILL.md:82In the instructionsOpen original file
> **妙记备选路径（无 `note_id`、有 `minute_token` 时）**：智能纪要与妙记是两条独立产物链路，缺少智能纪要不代表这场会没有内容。>> ```bash> # --minute-tokens 是复数形式（+download 同）；--output-dir 只接受相对路径> lark-cli minutes +detail --minute-tokens "<minute_token>" --transcript --output-dir ./transcripts --as user> ```>> 逐字稿会落盘，供 Step 4 基于原始发言独立提炼（不要照搬 AI 总结）。若返回 `No read permission`（`2091005`），先把无权限事实告知用户，用户明确同意后再用单数 flag 申请：`lark-cli minutes +apply-permission --minute-token "<minute_token>" --perm view --as user`；申请需 owner 在客户端批准后才可重试。详见 [基于 minute_token 查询妙记及关联产物](../lark-meeting/scenes/query-minutes-and-artifacts.md)。

Creating or appending to a cloud document is optional and is only instructed when requested by the user; the append operation modifies the existing document selected by the user.

View source
SKILL.md:112In the instructionsOpen original file
### Step 5: 生成文档（可选，用户要求时）阅读 [`../lark-doc/SKILL.md`](../lark-doc/SKILL.md) 学习云文档技能。```bashlark-cli docs +create --doc-format markdown --content $'<title>会议纪要汇总 (<start> - <end>)</title>\n<内容>'# 或追加到已有文档lark-cli docs +update --doc "<url_or_token>" --command append --doc-format markdown --content $'<内容>'```

Critical authentication, identity, permission, and meeting-artifact routing behavior is delegated to adjacent lark-shared and lark-meeting skills. Those files are not included in the evidence, so their concrete behavior cannot be verified from this source.

View source
SKILL.md:13In the instructionsOpen original file
**CRITICAL — 开始前 MUST 先完整读取 [`../lark-shared/SKILL.md`](../lark-shared/SKILL.md) 和 [`../lark-meeting/SKILL.md`](../lark-meeting/SKILL.md)**。认证、身份和权限以 lark-shared 为准；会议与产物关系、产物选择和逐字稿路由以 lark-meeting 为准。
Start here · InstructionsSKILL.md
lark-workflow-meeting-summary
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:24In the instructionsOpen original file
```bashlark-cli auth login --domain vc        # 基础（查询+纪要）
SKILL.md:56In the instructionsOpen original file
```bash# page-size 最大为 30
SKILL.md:70In the instructionsOpen original file
1. 查询会议关联的纪要信息```bash# 首先获取 note_id 和 minute_token
Lines read
130
File checksum (to compare versions)
351dc6855a1dbcbc67d99a4497bf75764a68dedff93555468613331b2f686404