Skillv1.0.6

ClawScan security

ZeeLin MeetingDirectives · ClawHub's context-aware review of the artifact, metadata, and declared behavior.

BenignMar 4, 2026, 3:12 PM

Verdict: benign
Confidence: high
Model: gpt-5-mini
Summary: The skill is an instruction-only extractor that asks for a meeting transcript and a target member and does not request unrelated credentials, installs, or system access — its requirements align with its stated purpose.
Guidance: This skill appears coherent and only needs meeting transcripts and a target person. Before using it, ensure you have consent to process the transcript (it may contain sensitive or personal data). Verify extracted action items against the original transcript for accuracy, and be cautious about feeding transcripts that include confidential content. Note the skill can be invoked by the agent normally (disable-model-invocation is false), so limit automated invocation if you don't want it run without explicit prompts.

Purpose & Capability: okName/description (extract action items for a specified member from meeting transcripts) match the SKILL.md: it only needs a transcript and target member. No unrelated env vars, binaries, or config paths are requested.
Instruction Scope: okRuntime instructions ask the agent to parse provided meeting transcription and extract tasks, deadlines, priority, and quotes. They do not instruct reading system files, environment variables, or contacting external endpoints beyond processing the supplied transcript.
Install Mechanism: okNo install spec or code files are present (instruction-only), so nothing is written to disk or fetched at install time.
Credentials: okThe skill declares no environment variables, credentials, or config paths. That is proportional to its function of parsing user-provided transcripts.
Persistence & Privilege: okalways is false and the skill does not request persistent system presence or modify other skills. It can be invoked by the agent (default), which is expected for this kind of skill.