ClawHub

Create secure videoconference

v1.0.1

Default video conferences via Meetling. Instant calls always use /m/ rooms + share payload for Claw default sending. Scheduled calls return link + email invi...

⭐ 0· 541·0 current·0 all-time
by@bavxhack
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (create Meetling links, share payloads, email templates) align with required binary (node), the two env vars (threshold and default language), and the single code file which builds /m/ links. No unrelated credentials or services requested.
✓
Instruction Scope
SKILL.md and index.js only read ./contacts.json (explicitly stated and enforced), parse input (stdin/argv), compute mode, build a slug and URL, and emit JSON output. All file reads and behaviors are scoped to producing the described outputs; no arbitrary file or system scanning is present.
✓
Install Mechanism
No install spec (instruction-only skill) and packaged code is simple Node.js with no external installs or downloads. Requiring node is proportional and expected; package.json is minimal.
✓
Credentials
Only MEETLING_INSTANT_THRESHOLD_MINUTES and SKILL_LANGUAGE_DEFAULT are declared and used. No secret tokens or unrelated environment variables are requested.
✓
Persistence & Privilege
Skill does not request always:true, does not modify other skills or system settings, and has normal user-invocable/autonomous defaults. It only reads a local contacts.json file in the working directory.
Assessment
This skill appears to do exactly what it claims: create Meetling /m/ links and produce share/email payloads. Before installing, review the contacts.json you will place in the working directory — it will be read (and the skill will output resolved recipient IDs/channels in the JSON share payload). Ensure contacts.json does not contain secrets you wouldn't want included in the skill's output. Also confirm you are comfortable with generated Meetling links being constructed from the hardcoded base URL (https://app.meetling.de). If you want additional assurance, run the index.js locally with sample inputs to inspect outputs before enabling the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk979p50mmvh85dd5ypt6v8ezyn81c069

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binsnode
EnvMEETLING_INSTANT_THRESHOLD_MINUTES, SKILL_LANGUAGE_DEFAULT

Comments