ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

MeetMatch Sales Coach

v1.0.0

AI sales coach that sends personalized morning briefings, tracks rep patterns over time, and uses MeetMatch's ML predictions to make your agent smarter about...

⭐ 1· 3·0 current·0 all-time
by@brettonb
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, required env vars (MEETMATCH_API_KEY, MEETMATCH_ORG_ID), declared network permission, and the documented API endpoints all align with a MeetMatch integration for briefings, memory, and stats. No unrelated credentials or binaries are requested.
ℹ
Instruction Scope
SKILL.md instructs the agent to fetch briefings, memory, stats and schedules from MeetMatch and produce/send morning briefings. It does not instruct the agent to read unrelated files or exfiltrate data. Minor gap: the skill assumes the agent/platform has a delivery mechanism for email (delivery_method) but does not request SMTP credentials or detail how emails are sent—this is likely platform-handled but worth confirming.
✓
Install Mechanism
No install spec or code files are provided (instruction-only), so nothing is downloaded or written to disk by the skill itself. This is the lower-risk model for skills.
✓
Credentials
Only two environment/config values are required (API key and org ID) which are proportionate and expected for the described API usage. The sample key prefix (mm_live_) and org UUID in docs are consistent with an external service API.
ℹ
Persistence & Privilege
The skill defines scheduled triggers (cron) to check briefings and can be invoked autonomously by the platform (default). It does not set always: true and does not request system-wide privileges, but it will make periodic network calls and send emails—confirm you are comfortable with recurring access to org-level sales data.
Assessment
This skill appears coherent with its stated purpose, but before installing: 1) Confirm you trust MeetMatch and understand what the API key grants (access to member schedules, memory, performance/stats). 2) Use the least-privilege API key possible and understand retention/visibility of transcripts and coaching memory in MeetMatch. 3) Verify how the OpenClaw platform will deliver briefings (email) and whether any additional mail credentials or PII are needed. 4) Monitor network activity and rotate/revoke the MEETMATCH_API_KEY when uninstalling or if access is no longer needed. If you need higher assurance, ask the publisher for the actual request/response examples, or request a code-backed skill (not instruction-only) so you can review how emails are sent and how member identifiers are handled.

Like a lobster shell, security has layers — review code before you run it.

aivk973c5st4cr62852av8z0ns3kx84bagkcoachingvk973c5st4cr62852av8z0ns3kx84bagkcrmvk973c5st4cr62852av8z0ns3kx84bagklatestvk973c5st4cr62852av8z0ns3kx84bagkmlvk973c5st4cr62852av8z0ns3kx84bagkmorning-briefingvk973c5st4cr62852av8z0ns3kx84bagksalesvk973c5st4cr62852av8z0ns3kx84bagksales-intelligencevk973c5st4cr62852av8z0ns3kx84bagk

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvMEETMATCH_API_KEY, MEETMATCH_ORG_ID
Configbriefing_hour, delivery_method

Comments