跳到主要内容
知仓学习社ZHICANG

fathom

Fetch meetings, transcripts, summaries, and action items from Fathom API. Use when user asks to get Fathom recordings, sync meeting transcripts, or …

读凭据执行命令联网严重 3 · 高危 8glebis/claude-skills

它会碰到什么

扫了多少6 个文本文件,28 KB
它会碰到什么读凭据执行命令联网
命中总数14 处
命中统计严重 3 · 高 8 · 中 2 · 低 1
逐条看命中(11 条严重或高危)
  • 严重 scripts/download_video.py:185cred-paths
    load_dotenv()  # Load environment variables from .env file
  • 严重 scripts/utils.py:13cred-paths
    env_path = Path(__file__).parent / '.env'
  • 严重 SKILL.md:116cred-paths
    API key stored in `~/.claude/skills/fathom/scripts/.env`:
  • scripts/download_video.py:66exec-spawn
    process = subprocess.Popen(
  • scripts/download_video.py:132exec-spawn
    subprocess.run(remux_command, check=True, capture_output=True)
  • scripts/download_video.py:158exec-spawn
    result = subprocess.run(
  • scripts/download_video.py:222cred-envread
    output_dir = os.getenv("OUTPUT_DIR", ".")
  • scripts/fetch.py:159exec-spawn
    subprocess.run(
  • scripts/fetch.py:175exec-spawn
    result = subprocess.run(
  • scripts/fetch.py:203exec-spawn
    subprocess.run(
  • scripts/utils.py:16cred-envread
    API_KEY = os.getenv('FATHOM_API_KEY')

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Fathom Meeting Fetcher

Fetches meeting data directly from Fathom API including transcripts, AI summaries, action items, and participant info.

Usage

python3 ~/.claude/skills/fathom/scripts/fetch.py [options]

Commands

| Command | Description |

|---------|-------------|

| --list | List recent meetings with IDs |

| --id <id> | Fetch specific meeting by recording ID |

| --today | Fetch all meetings from today |

| --since <date> | Fetch meetings since date (YYYY-MM-DD) |

Options

| Option | Description |

|--------|-------------|

| --analyze | Run transcript-analyzer on fetched meetings |

| --download-video | Download video recording (requires ffmpeg) |

| --output <path> | Output directory (default: ~/Brains/brain) |

| --limit <n> | Max meetings to list (default: 10) |

Examples

List recent meetings

python3 ~/.claude/skills/fathom/scripts/fetch.py --list

Fetch today's meetings

python3 ~/.claude/skills/fathom/scripts/fetch.py --today

Fetch and analyze

python3 ~/.claude/skills/fathom/scripts/fetch.py --today --analyze

Fetch since date

python3 ~/.claude/skills/fathom/scripts/fetch.py --since 2025-01-01

Fetch specific meeting

python3 ~/.claude/skills/fathom/scripts/fetch.py --id abc123def456

Download video with meeting

python3 ~/.claude/skills/fathom/scripts/fetch.py --id abc123def456 --download-video

Output Format

Each meeting is saved as markdown with:

---
fathom_id: <id>
title: "Meeting Title"
date: YYYY-MM-DD
participants: [list]
duration: HH:MM
fathom_url: <url>
share_url: <url>
---

# Meeting Title

## Summary
{AI-generated summary from Fathom}

## Action Items
- [ ] Item 1 (@assignee)
- [ ] Item 2

## Transcript
**Speaker Name**: What they said...

File Naming

Files are saved as: YYYYMMDD-meeting-title-slug.md

Example: 20250106-weekly-standup.md

Prerequisites

Install dependencies (first time):

pip install requests python-dotenv

For video download (optional):

# ffmpeg required for video downloads
brew install ffmpeg  # macOS
# or apt install ffmpeg (Linux)

Configuration

API key stored in ~/.claude/skills/fathom/scripts/.env:

FATHOM_API_KEY=your-api-key

Integration

  • transcript-analyzer: Use --analyze flag to automatically process transcripts
  • video-downloader: Use --download-video flag to download meeting recordings
  • Validates downloaded videos using ffprobe
  • Automatically retries up to 3 times if download fails
  • Videos saved as .mp4 next to meeting markdown files
  • Replaces Dropbox sync workflow (direct API access)

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。