Back to skill
Skillv1.0.0
ClawScan security
Meet · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignMar 8, 2026, 5:58 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only meeting facilitation system and its requirements and instructions are internally consistent with that purpose.
- Guidance
- This is a guidance-only meeting facilitator: it contains templates, rules, and pseudo-code but does not itself access calendars, transcripts, or credentials. Before enabling it, consider: (1) whether you will grant the agent calendar/microphone/transcript access (those permissions would be granted outside this skill and are not declared here); (2) whether you want the agent to act autonomously when it detects trigger phrases (disable autonomous invocation if you prefer manual control); and (3) monitoring the agent for accidental sharing of meeting content if you later integrate it with meeting platforms or transcription services. No obvious red flags were found, but limit platform-level permissions (calendar, email, meeting recordings) unless you intentionally want the skill to use them.
Review Dimensions
- Purpose & Capability
- okName and description describe meeting facilitation; the skill is instruction-only and requests no binaries, credentials, or installs — this is proportionate for a pure guidance/facilitation skill.
- Instruction Scope
- noteSKILL.md contains detailed templates, heuristics, and small pseudo-code examples for agendas, facilitation, and transcript analysis. It does not instruct the agent to read system files, environment variables, or call external endpoints, but it is written to trigger on meeting-related phrases and refers to processing 'transcripts' and 'attendees'. To be fully useful the agent may need calendar or transcript access in practice; those accesses are not declared here (the skill does not itself request them).
- Install Mechanism
- okNo install spec or code is provided (instruction-only). Nothing will be downloaded or written to disk by the skill itself.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. That aligns with its instruction-only, advisory nature.
- Persistence & Privilege
- okFlags are default (always: false, user-invocable: true, model invocation allowed). The skill does not request permanent presence or modify other skills/configs.