Actual behavior is controlled by an unprovided, unaudited sibling Skill
Source references: 2This entry requires the agent to fully read and execute ../lark-meeting/SKILL.md, but that file is absent from the supplied audit material. Reviewing this file alone therefore cannot establish which meeting data, commands, or external actions will actually be used. The risk is the mandatory transfer of control, not merely missing documentation.
If the installed lark-meeting Skill is replaced, updated, or contains actions beyond the user's expectations, invoking lark-note inherits those actions and permissions, potentially affecting the user's data, accounts, or decisions. The available evidence does not establish that such harm has occurred.
This Skill explicitly acts only as a legacy-name compatibility entry and delegates handling to lark-meeting, whose instructions it requires the agent to read and follow. Because that referenced file is absent from the supplied material, the eventual access to meeting data, commands, or external services cannot be assessed; the delegation alone does not establish malicious behavior. A user can request the complete lark-meeting Skill for audit and restrict this compatibility entry until then.
This assessment concerns the code and conditions shown, not proof that harm has occurred.version: 1.0.0description: "仅当用户或上游配置显式指定 lark-note 时使用，相关请求统一交由 lark-meeting 技能处理。"metadata: requires: bins: ["lark-cli"] skills: ["lark-meeting"]---Show 1 other places
本技能只用于兼容旧名称，不直接处理业务。**MUST 完整读取 [`../lark-meeting/SKILL.md`](../lark-meeting/SKILL.md)，并按照其中的路由和行动指南执行。**