会议议程生成助手

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a legitimate meeting-agenda document generator, with the main caveat that it can auto-install Python packages and use local Office/LibreOffice tools for PDF conversion.

This skill looks safe for generating agenda documents from meeting details. Before using it, be comfortable with runtime Python package installation and local Word/LibreOffice-based PDF conversion, and direct outputs to a workspace or temporary folder you control.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the skill may fetch and execute third-party Python package code from the package ecosystem if dependencies are missing.

Why it was flagged

The script downloads and installs missing Python packages at runtime. This is related to the document-generation purpose, but the packages are not pinned or handled through a declared install spec.

Skill content
subprocess.check_call([sys.executable, "-m", "pip", "install", "--quiet"] + missing)
Recommendation

Prefer pre-installing reviewed, pinned versions of the required packages in a controlled environment before running the skill.

What this means

PDF generation may open or run local document-conversion software on the user's machine.

Why it was flagged

The script can automate Microsoft Word or run LibreOffice to convert the generated .docx file to PDF. This is purpose-aligned, but it invokes local applications and subprocesses.

Skill content
word = win32com.client.Dispatch("Word.Application") ... subprocess.run([soffice, "--headless", "--convert-to", "pdf", "--outdir", pdf_dir, docx_abs], capture_output=True, timeout=60)
Recommendation

Run it in a normal user workspace, avoid sensitive output paths, and manually convert the Word file if automatic PDF conversion is not desired.