ClawHub
Back to skill

Security audit

Auto Meeting Minutes

Security checks for vulnerabilities and agentic risk

Overview

This skill appears to be a straightforward meeting-transcript summarizer, with the main user consideration being that meeting transcripts may contain sensitive information.

Installers should treat meeting transcripts as potentially confidential. Use this skill only on content you are authorized to process, redact unnecessary personal or business-sensitive details when practical, and review the generated minutes before sharing them.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The skill explicitly processes meeting transcripts that commonly contain personal names, internal decisions, budgets, supplier terms, and action items, but it provides no warning or handling guidance for sensitive content. This increases the risk that users will paste confidential or regulated data into the system without minimization, consent, or review, leading to privacy or business-information exposure.

Static analysis

No suspicious patterns detected.