会议议程生成助手
PassAudited by ClawScan on May 10, 2026.
Overview
This appears to be a legitimate meeting-agenda document generator, with the main caveat that it can auto-install Python packages and use local Office/LibreOffice tools for PDF conversion.
This skill looks safe for generating agenda documents from meeting details. Before using it, be comfortable with runtime Python package installation and local Word/LibreOffice-based PDF conversion, and direct outputs to a workspace or temporary folder you control.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running the skill may fetch and execute third-party Python package code from the package ecosystem if dependencies are missing.
The script downloads and installs missing Python packages at runtime. This is related to the document-generation purpose, but the packages are not pinned or handled through a declared install spec.
subprocess.check_call([sys.executable, "-m", "pip", "install", "--quiet"] + missing)
Prefer pre-installing reviewed, pinned versions of the required packages in a controlled environment before running the skill.
PDF generation may open or run local document-conversion software on the user's machine.
The script can automate Microsoft Word or run LibreOffice to convert the generated .docx file to PDF. This is purpose-aligned, but it invokes local applications and subprocesses.
word = win32com.client.Dispatch("Word.Application") ... subprocess.run([soffice, "--headless", "--convert-to", "pdf", "--outdir", pdf_dir, docx_abs], capture_output=True, timeout=60)Run it in a normal user workspace, avoid sensitive output paths, and manually convert the Word file if automatic PDF conversion is not desired.
