MeetMatch Sales Coach
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill is coherent for a MeetMatch sales-coaching integration, but it relies on trusted API credentials, persistent rep memory, and scheduled email briefings with sensitive business data.
Install only if you trust the publisher and intend to give OpenClaw access to MeetMatch sales-coaching data. Use a limited API key, confirm which reps receive email briefings, review retention/access policies for rep memory, and revoke the key if you stop using the skill.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone configuring this skill gives the agent access to MeetMatch data available to that API key, including schedules, rep memory, and performance stats.
The skill needs a MeetMatch bearer token and organization ID to retrieve organization-specific sales data. This is expected for the integration, but it grants delegated access to sensitive business information.
All requests require header: Authorization: Bearer {MEETMATCH_API_KEY}Use a scoped and revocable MeetMatch OpenClaw API key, store it as a secret, and revoke it when the skill is no longer needed.
Sales reps’ coaching history, patterns, and performance trends may influence future briefings and advice.
The skill explicitly uses persistent, longitudinal rep coaching memory. This is purpose-aligned, but it means employee performance observations may be reused over time.
**Persistent rep memory.** After every call, MeetMatch generates coaching analysis. This skill accumulates those observations into a memory that follows each rep across weeks and months.
Confirm MeetMatch retention, access-control, correction, and opt-out policies before enabling this for a team.
Briefings could be sent automatically on schedule rather than only after a manual request.
The skill declares an automatic scheduled action that may send briefings by email. This matches the stated morning-briefing purpose, but it is outbound communication with sensitive coaching data.
cron: "0 * * * *" ... action: "Check if it's briefing time for any reps and send morning emails"
Verify the briefing hour, delivery method, recipient list, and whether scheduled email delivery can be disabled or reviewed.
Users may have less assurance that this is the official MeetMatch integration before trusting it with an API key.
The registry metadata does not establish a source repository or homepage for the skill, even though it asks users to configure MeetMatch credentials.
Source: unknown; Homepage: none
Verify the publisher through MeetMatch’s own documentation or support before installing and configuring credentials.