Meeting Minutes

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This appears to be a benign local meeting-minutes formatter, with ordinary cautions about running its included Python script and handling sensitive medical transcript content.

Before installing, confirm you are comfortable running the included local Python script and processing any medical or confidential transcript content in your workspace. Review generated minutes before sharing them or using them in downstream workflows.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the skill as documented may execute its included Python file on the user's machine or workspace.

Why it was flagged

The skill documents local execution of a packaged Python script. This is disclosed and aligned with the skill's purpose, but users should still notice that installing/using the skill may involve running local code.

Skill content
python -m py_compile scripts/main.py
python scripts/main.py
Recommendation

Review the included script before running it and execute it only in the intended workspace with the transcript inputs you mean to process.

What this means

Sensitive clinical or meeting details could be carried into generated minutes and later reused or shared by other workflows.

Why it was flagged

The skill is designed to transform medical meeting transcripts into persistent structured minutes, and its own risk table notes that outputs may be saved to the workspace.

Skill content
Structures medical meeting transcripts into formal minutes... Data Exposure | Output files saved to workspace | Low
Recommendation

Avoid unnecessary patient or confidential identifiers, store generated minutes securely, and review outputs before sharing or using them downstream.