Agent Andri
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears to do what it says—append a simple status message to a local meeting-room file—but users should notice that the script runs indefinitely and the documentation mentions an unused API key.
Before installing or running, confirm you want a continuously running status reporter that appends to the meeting-room file every 30 seconds. Stop the process when reporting is no longer needed, and do not provide the mentioned NV_API_KEY unless you have reviewed an additional component that truly needs it.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If run and left active, it can keep writing to the status file indefinitely, growing the file over time.
The script intentionally keeps running and appends a status message every 30 seconds. This is purpose-aligned, but it can continue until manually stopped.
while true; do ... echo "[$ts] $AGENT_NAME : sedang idle" >> "$TO_LEADER" ... sleep 30
Run it only when continuous reporting is desired, and consider adding a stop condition, supervisor controls, or log rotation.
Other agents or workflows that read the meeting-room file may consume whatever this script appends. The current script only writes a simple idle status.
The script writes into a meeting-room skill workspace file, which is likely intended as an inter-agent communication channel.
BASE_DIR="$HOME/.openclaw/workspace/skills/meeting-room" TO_LEADER="$BASE_DIR/to_leader.txt"
Confirm the meeting-room file is the intended shared channel and avoid modifying the script to write secrets or sensitive content there.
Providing an unnecessary API key would increase exposure without benefiting the included status-reporting script.
The documentation mentions an agent API key even though the included script does not use it and the registry declares no primary credential.
`NV_API_KEY` – API-key khusus agen (tidak dipakai di contoh ini, hanya disimpan bila diperlukan).
Do not supply NV_API_KEY for this skill unless a separately reviewed, necessary component requires it.
