Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Meeting Efficiency Pro

AI-powered meeting optimization tool that analyzes calendar events, provides efficiency scores, extracts action items, and automates follow-ups. Save 20%+ of...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 82 · 1 current installs · 1 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The code and SKILL.md implement meeting analysis, calendar integration, AI-assisted note processing, and reporting — which matches the skill name/description. However the registry metadata declares no required environment variables or credentials, while the SKILL.md and config files clearly require AI keys and calendar/task-manager credentials (ai_api_key, calendar OAuth creds, task_manager_token, smtp settings). That mismatch is unexpected and should be justified by the publisher.
!
Instruction Scope
Runtime instructions (SKILL.md + index.js) direct the agent to run setup which executes shell commands (node/npm version checks and 'npm install') and to read or edit config/default.json. The tool also reads arbitrary paths provided to process notes (e.g., any filesystem path passed by the user). Those behaviors are reasonable for this skill, but the SKILL.md does not declare the sensitive credentials it will consume, and the agent-run setup executes commands on the host — both are scope elements the user must accept explicitly. Review of scripts/setup.js and demo.js (only listed, not fully shown) is recommended because they may perform additional setup/network actions.
Install Mechanism
Install spec installs a node package 'meeting-efficiency-pro' which is standard for a Node-based skill. The package.json lists common dependencies (openai, googleapis, axios, etc.). The install is not a direct download-from-URL extract, but installing an npm package still runs package install scripts — verify package provenance (registry owner) before installing. The skill's manifest shows 'Source: unknown' while package.json claims GitHub/homepage URLs — this metadata mismatch reduces trust.
!
Credentials
The skill requires API keys and calendar/task manager credentials to operate (ai_api_key, calendar credentials, task_manager_token, SMTP settings), but the registry metadata claims 'Required env vars: none' and 'Primary credential: none'. That is disproportionate: the skill legitimately needs those secrets, but they are not declared in the registry metadata. Also the skill writes/reads plain config/default.json — API keys could be stored in plaintext there, which is a privacy risk if not handled carefully.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or global agent settings in the files shown. It uses normal install/runtime behavior and does not demand permanent forced presence.
What to consider before installing
Key points to consider before installing: - Provenance: the registry metadata lists the source as 'unknown' but package.json references a GitHub URL and ClawHub; verify where the package will come from (official ClawHub/NPM) and confirm the publisher identity before installing or running setup. - Secrets: this skill requires AI API keys, calendar OAuth credentials, and optional task-manager or SMTP tokens. Those are not declared in the registry metadata — treat that as a red flag. Only provide credentials after you trust the publisher, and prefer temporary or scoped API keys where possible. - Local config storage: the skill uses config/default.json to hold settings; API keys placed there will be stored in plaintext. Consider using environment variables, a secrets manager, or limiting file permissions. Inspect scripts/setup.js to see whether it leaks any data or sends configuration to external endpoints during setup. - Runtime commands: setup runs node/npm and executes 'npm install' via child_process.exec (present in index.js). Running setup will cause packages and any install scripts to run on your machine. If you need to audit, run 'npm install' inside a sandbox/container first. - Files/scripts not fully shown: demo.js and setup.js were present but not shown in full; review those files for network calls or unexpected behavior before trusting the skill. - Least privilege: create or use scoped API credentials (e.g., a limited OpenAI key, calendar account with limited access) and avoid reusing high-privilege or personal keys. - If unsure: run the skill in an isolated environment (VM or container) and audit network activity during initial setup and first runs. If the publisher/publish date is unexpected or you cannot verify the source, prefer to avoid installing it on production devices. If you want, I can: 1) look through the full contents of scripts/setup.js and scripts/demo.js to check for network calls or data exfiltration patterns; or 2) provide a checklist of what to verify in the package.json + repo before proceeding.
!
index.js:21
File read combined with network send (possible exfiltration).
About static analysis
These patterns were detected by automated regex scanning. They may be normal for skills that integrate with external APIs. Check the VirusTotal and OpenClaw results above for context-aware analysis.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.1
Download zip
latestvk979s16nq9yq4d43qwapygtkg183668e

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

Binsnode

Install

Install dependenciesnpm i -g meeting-efficiency-pro

SKILL.md

Meeting Efficiency Pro

Transform your meetings from time-wasters to productivity engines. This AI-powered skill analyzes your calendar, provides efficiency scores, extracts action items, and automates follow-ups.

Features

🎯 Meeting Analysis

  • Efficiency Scoring: AI-powered analysis of meeting effectiveness (0-100 score)
  • Pre-meeting Optimization: Suggestions to improve upcoming meetings
  • Pattern Detection: Identify inefficient meeting habits

📅 Calendar Integration

  • Google Calendar, Outlook, and iCal support
  • Daily Briefing: Morning summary of today's meetings with optimization tips
  • Recurring Meeting Analysis: Spot trends in regular meetings

🤖 AI-Powered Processing

  • Action Item Extraction: Automatically identify tasks from meeting notes
  • Decision Tracking: Capture key decisions made
  • Summary Generation: Concise bullet-point summaries

🔄 Follow-up Automation

  • Email Templates: Professional follow-up emails
  • Task Creation: Integrate with Todoist, Asana, or Jira
  • Reminder System: Never miss action item deadlines

📊 Analytics Dashboard

  • Weekly Reports: Meeting efficiency trends
  • Time Savings: Calculate hours saved
  • ROI Analysis: Meeting cost vs. outcomes

Quick Start

1. Installation

# Install from ClawHub
clawhub install meeting-efficiency-pro

# Or manually install dependencies
cd skills/meeting-efficiency-pro
npm install

2. Configuration

# Run setup wizard
/meeting-efficiency-pro setup

# Or configure manually
edit config/default.json

3. Basic Usage

# Get today's meeting briefing
/meeting-efficiency-pro briefing

# Analyze a specific meeting
/meeting-efficiency-pro analyze "Team Standup"

# Process meeting notes
/meeting-efficiency-pro process --notes "meeting-notes.txt"

# Generate weekly report
/meeting-efficiency-pro weekly-report

Configuration

Required Settings

{
  "ai_provider": "openai|grok",
  "ai_api_key": "your-api-key-here",
  "calendar_type": "google|outlook|ical|none"
}

Optional Settings

{
  "task_manager": "todoist|asana|jira|linear|none",
  "task_manager_token": "optional",
  "auto_briefing": true,
  "briefing_time": "08:00",
  "efficiency_threshold": 70,
  "email_integration": false,
  "smtp_settings": {}
}

Commands

Core Commands

  • /meeting-efficiency-pro setup - Interactive setup wizard
  • /meeting-efficiency-pro briefing - Get today's meeting briefing
  • /meeting-efficiency-pro analyze <meeting-title> - Analyze specific meeting
  • /meeting-efficiency-pro process --notes <file> - Process meeting notes
  • /meeting-efficiency-pro weekly-report - Generate weekly efficiency report

Advanced Commands

  • /meeting-efficiency-pro config - View/edit configuration
  • /meeting-efficiency-pro test - Test all integrations
  • /meeting-efficiency-pro demo - Run demo with sample data
  • /meeting-efficiency-pro export --format json|csv - Export analytics data

Integration Guide

Calendar Integration

  1. Google Calendar: Enable Google Calendar API and get OAuth credentials
  2. Outlook: Use Microsoft Graph API with app registration
  3. iCal: Provide .ics URL or file path

AI Provider Setup

  1. OpenAI: Get API key from platform.openai.com
  2. Grok: Get API key from x.ai (if available)

Task Manager Integration

  • Todoist: Personal access token from settings
  • Asana: Personal access token from developer console
  • Jira: API token from Atlassian account

Pricing & Licensing

Skill Price: $69

Includes:

  • Complete skill implementation
  • 1 year of free updates
  • 30 days of email support
  • Commercial use license

Optional Add-ons

  • Team License: $299 (up to 10 users)
  • White-label License: $499 (reselling rights)
  • Custom Integration: $69/hour (custom requirements)

Support & Resources

Documentation

  • Full API reference in references/api-docs.md
  • Configuration guide in config/README.md
  • Troubleshooting guide in references/troubleshooting.md

Support Channels

  • Email: support@clawhub.com (mention "Meeting Efficiency Pro")
  • Community: ClawHub Discord #meeting-efficiency
  • Updates: Check clawhub update meeting-efficiency-pro

Demo

Run the demo script to see the skill in action:

cd skills/meeting-efficiency-pro
node scripts/demo.js

Success Stories

"Saved our team 5 hours per week in meeting time. The efficiency scoring helped us eliminate unnecessary meetings." - Sarah, Product Manager

"The action item extraction is magical. No more missed tasks after meetings." - David, Engineering Lead

"Worth every penny. Paid for itself in the first week through time savings." - Maria, Consultant

Roadmap

Coming Soon (Q2 2025)

  • Real-time meeting coaching
  • Zoom/Teams integration for live transcription
  • Advanced sentiment analysis
  • Team collaboration features

Planned (Q3 2025)

  • Custom report templates
  • API for developers
  • Mobile app companion
  • Advanced analytics dashboard

Transform your meetings today. Install Meeting Efficiency Pro and start saving time immediately.

Files

11 total
Select a file
Select a file to preview.

Comments

Loading comments…