Back to skill
Skillv1.0.0
ClawScan security
Meeting Notes Pro · ClawHub's context-aware review of the artifact, metadata, and declared behavior.
Scanner verdict
BenignFeb 12, 2026, 7:37 PM
- Verdict
- benign
- Confidence
- high
- Model
- gpt-5-mini
- Summary
- The skill is an instruction-only meeting productivity template set that requests no credentials, installs, or unusual access and its runtime instructions align with the stated purpose.
- Guidance
- This skill is instruction-only and internally consistent with its meeting-productivity purpose. Before installing: (1) remember that summaries and action items are generated from text you provide — avoid pasting highly sensitive or confidential transcripts unless you trust the agent's storage/retention policies; (2) the skill does not include persistent storage or integrations, so if you want long-term tracking you must connect or export to an external tracker (calendar, task manager) yourself; (3) verify ownership and deadlines the skill infers before sending follow-ups; and (4) if you plan to use it with third-party meeting transcripts (Zoom, Teams), check those services' export/privacy settings to avoid unintended data sharing.
Review Dimensions
- Purpose & Capability
- okName and README state meeting-summary, agenda, and action-item features; the SKILL.md contains templates and rules that directly implement those features. There are no unrelated environment variables, binaries, or installs requested.
- Instruction Scope
- okRuntime instructions are limited to transforming user-provided notes/transcripts into structured summaries, templates, and trackers. They do not instruct the agent to read system files, environment variables, or to send data to external endpoints.
- Install Mechanism
- okNo install spec and no code files — instruction-only skill. Nothing is written to disk or downloaded, which minimizes install-time risk.
- Credentials
- okThe skill declares no required environment variables, credentials, or config paths. The templates' need for owners/deadlines is logical and does not imply access to external secrets.
- Persistence & Privilege
- okFlags show default autonomy (disable-model-invocation false) and always:false. The skill does not request permanent presence or modify other skills' config. Any storage of tracked items would rely on the agent's normal memory or user-provided integrations (not part of this skill).