Meetlark - coordinate a meeting
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only scheduling skill is coherent and purpose-aligned, but it uses Meetlark’s API and asks the agent to keep a private poll admin token while the poll is active.
This skill appears suitable for creating Meetlark scheduling polls. Before using it, be aware that poll details and votes are handled by Meetlark, the participation link lets anyone vote, and the private admin token should be kept confidential and removed from memory when the poll is finished.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent can create a poll and later close it through Meetlark when acting on the user’s request.
The skill uses external API calls to create and close scheduling polls. This is central to the stated purpose, but it mutates state on an outside service.
POST https://meetlark.ai/api/v1/polls?autoVerify=true ... POST https://meetlark.ai/api/v1/polls/{pollId}/closeConfirm poll details before creation and get clear user approval before closing a poll.
Anyone with the admin token can view individual poll responses and close the poll; anyone with the participation URL can vote.
The skill relies on bearer-style poll tokens: the admin token grants management and result-viewing access, while the participation URL grants voting access.
Admin token (`adm_...`) — Private. View full results, see who voted, close the poll. ... Anyone with the participate URL can vote
Keep the admin token private, share only the participation URL, and treat both links as access credentials.
If retained too broadly or too long, the admin token could be reused later to view results or close the poll.
The artifact explicitly asks the agent to persist the private admin token so it can manage the poll later.
Store it in your memory for the poll's lifetime.
Store the token only for the specific poll, avoid exposing it in shared conversation text, and delete it after the poll is closed or no longer needed.