Otterai Cli

ReviewAudited by ClawScan on May 10, 2026.

Overview

This is a coherent Otter.ai CLI wrapper, but it requires Otter credentials and can read, download, upload, and modify meeting content.

This skill appears purpose-aligned for Otter.ai work. Before installing, verify the external `otterai-cli` package source, understand that it will use your Otter credentials, and require confirmation before uploads, bulk changes, or trashing meeting content.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

The installed CLI will handle Otter.ai account access and meeting data, so its provenance matters.

Why it was flagged

The skill asks the user to install and trust an external CLI package; this is purpose-aligned, but the package code is not included in the reviewed artifacts.

Skill content

Install with:
```bash
uv tool install otterai-cli
```

Recommendation

Install only from a trusted package source, consider pinning a known-good version, and review the package/project before entering credentials.

Medium

#ASI03: Identity and Privilege Abuse

What this means

The CLI can access meeting notes, transcripts, recordings, and account metadata available to the supplied Otter account.

Why it was flagged

The skill requires Otter.ai credentials and may store or read them from local credential/config locations; this is expected for an Otter integration but grants account-level access.

Skill content

Credentials are stored in your OS keychain via keyring, with `~/.otterai/config.json` as fallback.

You can also use environment variables (`OTTERAI_USERNAME`, `OTTERAI_PASSWORD`), which take highest precedence.

Recommendation

Use the least-privileged account available, protect environment variables and local config files, and run `otter logout` or clear config when no longer needed.

Medium

#ASI02: Tool Misuse and Exploitation

What this means

If invoked incorrectly, the agent could change organization, titles, speaker tags, or trash meeting content in the connected Otter account.

Why it was flagged

The documented CLI can upload files and mutate Otter account data, including moving or trashing speeches; these actions are aligned with 'manage meeting notes' but are higher impact than read-only search.

Skill content

otter speeches upload recording.mp4          # upload audio for transcription

otter speeches rename SPEECH_ID "New Title"
otter speeches trash SPEECH_ID               # move to trash
otter speeches trash SPEECH_ID --yes         # skip confirmation

otter speeches move ID1 ID2 ID3 --folder "Work"

Recommendation

Ask the agent to confirm destructive or bulk changes before running them, and avoid `--yes` unless you explicitly want to skip confirmation.

Low

#ASI06: Memory and Context Poisoning

What this means

Private meeting details may be brought into the agent conversation or written to local files during normal use.

Why it was flagged

The skill can retrieve full meeting transcripts and download recordings/transcripts into files; this is core to the purpose, but meeting content may be sensitive.

Skill content

otter speeches get SPEECH_ID                 # get speech details + full transcript
...
otter speeches download SPEECH_ID -f txt     # formats: txt, pdf, mp3, docx, srt, md

Recommendation

Use specific meeting IDs, avoid retrieving unrelated meetings, and protect any downloaded transcript or recording files.