📦

tmeet-skill

Name: tmeet-skill
Author: tencentcloud

v1.0.15 Révision du contenu r1 Risque élevé 🌐 Accès réseau📁 Accès au système de fichiers⚙️ Commandes externes

Manage Tencent Meetings from the Command Line

Managing Tencent Meeting from an AI assistant requires many commands, identifiers, permissions, and confirmation steps. This skill routes requests through tmeet with documented privacy and safety checks.

Prend en charge: Claude Codex Code(CC)

⚠️ 38 Médiocre

Maintain this Skill? Claim it ⚠️ 38 Médiocre

Arrêtez-vous et demandez confirmation avant l’installation.

Examinez le plan et obtenez le consentement explicite de l’utilisateur avant de modifier des fichiers.

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "tmeet-skill" from https://skillstore.io/skills/tencentcloud-tmeet-skill.md and its manifest at https://skillstore.io/api/skills/tencentcloud-tmeet-skill/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/tencentcloud-tmeet-skill.md manifest signé GET /api/skills/tencentcloud-tmeet-skill/manifest lockfile signé GET /api/skills/tencentcloud-tmeet-skill/lockfile

Tester

Utilisation de « tmeet-skill ». Check whether I am signed in.

Résultat attendu:

You are signed in. The access credential is valid, and its secret value was not displayed.

Utilisation de « tmeet-skill ». Invite Chen Wei to the weekly planning meeting.

Résultat attendu:

Prepared invitation for Chen Wei to Weekly Planning, meeting number 482 731 905. Confirm before I send the invitation.

Utilisation de « tmeet-skill ». Find recordings from last week that mention launch readiness.

Résultat attendu:

Found two permitted recordings with matching transcript passages. One additional recording requires access approval before review.

Audit de sécurité

Risque élevé

v1 • 26/08/2026 Ouvrir le rapport versionné

All 267 static findings are false positives caused by Markdown links, inline code markers, sample identifiers, and high-entropy Chinese documentation. However, semantic review found unattended global installation, silent agent metadata exposure, and optional log upload risks. Publication should wait until these behaviors require informed user confirmation and safer data handling.

Fichiers analysés

2,097

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Préoccupations de sécurité confirmées (3)

Élevé

SKILL.md:17-23

Unattended Global Package Installation

The skill automatically installs the mutable latest tmeet package globally when the command is missing. This changes the host and introduces supply-chain exposure without user confirmation.

SKILL.md explicitly requires automatic global installation from npm using the latest tag when tmeet is absent.

Élevé

references/tmeet-tshoot.md:37-38 references/tmeet-tshoot.md:49-52

Local Log Archive Upload

The troubleshooting command can archive hidden local logs and upload them to a server. The skill lacks mandatory confirmation, review, and redaction rules for this upload path.

The documentation directly shows an upload option and identifies the local log source, while no upload-specific safeguard is stated.

Moyen

SKILL.md:49 references/tmeet-auth.md:26

Agent Metadata Exposed Without Notice

The skill requires agent and model names in environment variables before OAuth login without asking the user. The tmeet process can consume this metadata during a networked operation.

The disclosure instruction is explicit, but the documentation does not prove whether the CLI transmits these values to the service.

Facteurs de risque

🌐 Accès réseau (1)

references/tmeet-auth.md:34

📁 Accès au système de fichiers (21)

⚙️ Commandes externes (50)

Audité par: codex

Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné

Copier le lien du rapport

https://skillstore.io/skills/tencentcloud-tmeet-skill/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/tencentcloud-tmeet-skill/security.svg)](https://skillstore.io/skills/tencentcloud-tmeet-skill?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/tencentcloud-tmeet-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tencentcloud-tmeet-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/tencentcloud-tmeet-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citations académiques (APA · BibTeX · CFF)

Citation APA

tencentcloud. (2026). tmeet-skill security audit report (audit version 1) [Author version 1.0.15]. Skillstore. https://skillstore.io/skills/tencentcloud-tmeet-skill/audits/1

Citation BibTeX

@techreport{tencentcloud-tencentcloud-tmeet-skill-2026,
  author = {tencentcloud},
  title = {tmeet-skill security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/tencentcloud-tmeet-skill/audits/1},
  note = {Author version 1.0.15}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "tmeet-skill security audit report (audit version 1)"
version: "1.0.15"
type: report
authors:
  - name: "tencentcloud"
date-released: "2026-08-26"
url: "https://skillstore.io/skills/tencentcloud-tmeet-skill/audits/1"
identifiers:
  - type: other
    value: "skillstore:tencentcloud-tmeet-skill:audit:1"
    description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen

Architecture

100

Maintenabilité

Contenu

Communauté

Conformité aux spécifications

Ce que vous pouvez créer

Schedule Team Meetings

Create or update meetings, resolve invitees, and confirm notifications before changes.

Review Recordings and Transcripts

Locate permitted recordings, retrieve minutes, and search transcript passages for follow-up work.

Manage Live Meeting Access

Review participants, call invitees, remove attendees, and manage waiting room movement safely.

Essayez ces prompts

Check Login

Show my Tencent Meeting login status and explain any required next step.

Create a Meeting

Create a Tencent Meeting titled [topic] from [start time with zone] to [end time with zone].

Prepare an Invitation

Find [person] and prepare an invitation to meeting [meeting code]. Ask me to confirm before changing invitees.

Research Recorded Discussion

Find recordings for [date range], search transcripts for [keyword], and summarize matching passages. Respect permissions and pagination limits.

Bonnes pratiques

Provide complete times with time zones and clarify ambiguous meeting identifiers.
Review every destructive or notification-producing action before confirming execution.
Use compact results first, then request more pages only when needed.

Éviter

Do not use the directory as a general employee information lookup service.
Do not expose access tokens, refresh tokens, internal meeting identifiers, or unnecessary personal data.
Do not select among duplicate people or perform sensitive changes without explicit confirmation.