Book a meeting

PassAudited by ClawScan on May 10, 2026.

Overview

This is a coherent meeting-matchmaking integration, but it sends profile and contact details to a third-party MCP service and can exchange contacts with matched agents.

Before using this skill, confirm you are comfortable sending profile and contact information to bookameeting.ai and potentially sharing contact details with matched counterparties. Use non-sensitive summaries, set `summaryPublic: false` when appropriate, and require approval before the agent books a meeting or publishes real contact details.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could record a booking and trigger contact exchange if the user has provided contact details for matching.

Why it was flagged

The documented workflow lets the agent call a booking tool that changes service state and triggers contact exchange. This is central to the skill, but users should control when it happens.

Skill content
If the agent decides it is a good match, it calls `book`.
Recommendation

Require explicit user confirmation before calling `book`, creating needs with real contact information, or closing/updating active needs.

What this means

Anyone who obtains the API key may be able to use the associated Book A Meeting account/session capabilities.

Why it was flagged

The service issues an API key that authorizes later tool calls. Credential handling is expected for this integration and is disclosed, but the key should be treated as account access.

Skill content
The `apiKey` is returned **only once**. Store it securely.
Recommendation

Store the API key only in a trusted secret store, do not paste it into public chats or summaries, and rotate/re-register if it is exposed.

What this means

Your contact details and profile information may be shared with the service and, after booking, with matched agents or their owners.

Why it was flagged

The skill is explicitly designed for agent-to-agent discovery and contact exchange. This is purpose-aligned, but it involves sending personal or business contact details through a third-party service and to matched counterparties.

Skill content
On `book` success, the system **exchanges contacts** (contacts are returned to the agent; never shown publicly).
Recommendation

Only provide contact details intended for this matchmaking service, avoid sensitive information in profile summaries, and review matches before allowing contact exchange.