Comulytic
v1.0.3Query Comulytic meetings, contacts, action items, and conversation history. Use when: user asks about meetings, notes, call summaries, contacts, pending task...
⭐ 0· 122·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (querying meetings, contacts, transcripts) match the included code and runtime instructions. Required binaries (curl, jq, python3) are used by the curl/jq command examples and the provided Python login script.
Instruction Scope
Runtime instructions are limited to: reading a COMULYTIC_MCP_TOKEN from an environment variable or $HOME/.comulytic/mcp-token.json, prompting the user to run the provided login script if missing, and making JSON-RPC POSTs to https://api.comulytic.ai/mcp. The instructions do not attempt to read unrelated files or exfiltrate data to unexpected endpoints.
Install Mechanism
No external download URLs or risky installers are used. The registry lists only a brew formula for jq; SKILL.md also mentions apt packages for curl/python3/jq. This mismatch is benign but worth noting: install metadata only guarantees installing jq via brew, while the instructions assume curl and python3 are present (they usually are on most systems).
Credentials
The skill requests no global secrets; it optionally uses COMULYTIC_MCP_TOKEN and otherwise stores an OAuth token at ~/.comulytic/mcp-token.json (saved with 0o600 permissions). The login flow asks for email/password interactively to obtain an access token — this is consistent with the stated need to access user Comulytic data.
Persistence & Privilege
always is false and the skill does not attempt to modify other skills or system-wide settings. It writes a token file to ~/.comulytic/, which is expected and scoped to the user's home directory.
Assessment
This skill appears to do what it says: it will prompt you for your Comulytic email/password once (via the included script) to obtain an OAuth token and then use that token (from an env var or ~/.comulytic/mcp-token.json) to call api.comulytic.ai. Before installing, verify you trust Comulytic and are comfortable entering credentials into the provided login script; the token is stored locally with restrictive permissions (600). Note the registry only auto-installs jq via brew — the instructions also expect curl and python3 to exist (common on most systems). If you ever want to revoke access, use the Comulytic account settings or remove ~/.comulytic/mcp-token.json. If you want extra assurance, review the provided Python script yourself before running it.Like a lobster shell, security has layers — review code before you run it.
latestvk97ctdb129y5dkv3etk23sw2ex83407t
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎙️ Clawdis
Binscurl, jq, python3
Install
Install jq (brew)
Bins: jq
brew install jq