Actual actions are determined by instructions that were not supplied
Source references: 2The entry mandates that the agent fully read and execute ../lark-meeting/SKILL.md, but that file is absent from the audit material. This package alone therefore cannot establish which meetings, files, or account data would be accessed, or whether writes or network actions would occur.
When lark-minutes is explicitly enabled, the effective authorization scope depends on the lark-meeting version installed in the environment. Replacing or updating that external file can change the entry's behavior.
The candidate is supported only as an inability to verify, not as evidence of malicious behavior. This file says it is merely a legacy-name compatibility entry and requires actual handling to follow `../lark-meeting/SKILL.md`; it also declares a dependency on `lark-cli`. Because the referenced skill is absent, the evidence cannot show which meetings, files, or account data it accesses, whether it performs network or write operations, or whether it asks for user authorization. Before enabling it, a user can request that referenced file for review and restrict the CLI account’s permissions and scope.
This assessment concerns the code and conditions shown, not proof that harm has occurred.version: 1.0.0description: "仅当用户或上游配置显式指定 lark-minutes 时使用，相关请求统一交由 lark-meeting 技能处理。"metadata: requires: bins: ["lark-cli"] skills: ["lark-meeting"]---Show 1 other places
本技能只用于兼容旧名称，不直接处理业务。**MUST 完整读取 [`../lark-meeting/SKILL.md`](../lark-meeting/SKILL.md)，并按照其中的路由和行动指南执行。**