Back to skill
Skillv1.0.0
ClawScan security
meeting-agenda-generator · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignApr 18, 2026, 7:30 AM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only meeting agenda template generator and its requirements and behavior are consistent with that purpose.
- Guidance
- This skill appears to only provide agenda templates and meeting best-practices and does not request any credentials or system access — generally safe to use. Before installing, consider: (1) If you plan to combine it with calendar or messaging integrations, those implementations will need credentials and should be reviewed separately; (2) Avoid pasting sensitive meeting content into third-party tools unless you trust them; (3) Watch for future versions that add install steps or request environment variables (those would change the risk profile).
Review Dimensions
- Purpose & Capability
- okName, description, and the SKILL.md all describe creating meeting agendas and templates; there are no unrelated requirements (no env vars, binaries, or config paths) requested.
- Instruction Scope
- okRuntime instructions consist solely of agenda templates, meeting types, and best-practices; they do not direct the agent to read files, access environment variables, contact external endpoints, or collect/transmit data outside the user's input.
- Install Mechanism
- okNo install spec and no code files — the skill is instruction-only so nothing is written to disk or downloaded during install.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths; this is proportionate to a purely templating/assistant skill.
- Persistence & Privilege
- okThe skill does not request elevated persistence (always is false). Autonomous invocation is allowed by default on the platform but this skill's content does not give it additional privileges or access.