← Back to Skills Marketplace
atiati82

Andara Meeting Minutes

by atiati82 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
210
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install andara-meeting-minutes
Description
Capture meeting summaries and action items from voice or text
README (SKILL.md)

Meeting Minutes Skill

When ATTi or a team member sends a meeting summary (voice or text), save it as a structured record.

Trigger

When user says something like "Meeting Notes:", "Besprechungsnotizen:", or "save meeting" — parse the content and store it.

Steps

  1. Extract the meeting topic, attendees, decisions, and action items from the message.

  2. Save to PostgreSQL using bash + psql:

psql "$DATABASE_URL" -c "
INSERT INTO team_meetings (title, summary, attendees, meeting_date, created_at)
VALUES ('TOPIC', 'SUMMARY', ARRAY['ATTENDEE1','ATTENDEE2'], NOW(), NOW())
RETURNING id;"
  1. For each action item, insert into meeting_action_items:
psql "$DATABASE_URL" -c "
INSERT INTO meeting_action_items (meeting_id, assignee, description, due_date, status, created_at)
VALUES (MEETING_ID, 'ASSIGNEE', 'TASK DESCRIPTION', 'DUE_DATE', 'pending', NOW());"
  1. Confirm to the user: "Meeting gespeichert ✅ — [X] Action Items erstellt."

Output Format

Reply in German with a structured summary:

  • 📋 Meeting: [Title]
  • 👥 Teilnehmer: [Names]
  • ✅ Action Items: [List with assignees]
  • 📅 Nächstes Treffen: [if mentioned]
Usage Guidance
Before installing or enabling this skill, ask the developer to: 1) explicitly declare required binaries and environment variables (psql and DATABASE_URL) in the metadata; 2) provide a safer insertion method (use parameterized queries or a DB client library rather than constructing SQL inside bash) to eliminate SQL injection risk; 3) explain what data is stored and for how long, and ensure the DB uses least-privilege credentials (an insert-only, limited-scope role on a non-production/test DB first); 4) confirm the psql binary requirement and network access rules (which hosts/ports the skill will connect to); and 5) consider alternative designs that don't require direct DB credentials in the agent (e.g., a backend service or sanitized API). If the developer cannot supply these clarifications, treat the skill as unsafe to enable with access to any production database or sensitive meeting content.
Capability Analysis
Type: OpenClaw Skill Name: andara-meeting-minutes Version: 1.0.0 The skill is highly vulnerable to SQL and shell injection attacks because it instructs the agent to execute bash commands using 'psql' with unvalidated user input (SKILL.md). While the stated purpose of saving meeting minutes is legitimate, the construction of shell strings using placeholders like 'TOPIC' and 'SUMMARY' without sanitization allows for potential command execution or database manipulation if a user provides crafted input.
Capability Assessment
Purpose & Capability
The skill's purpose (capture meeting summaries/action items) legitimately may need a database. However, the SKILL.md expects a PostgreSQL connection (psql + $DATABASE_URL) even though the skill metadata declares no required env vars or binaries. That mismatch is incoherent: a DB URL and psql are expected for the stated functionality but are not declared.
Instruction Scope
Instructions tell the agent to parse user messages and execute psql commands via bash with data interpolated into SQL. The examples show direct substitution of parsed text into SQL executed in a shell, which is vulnerable to SQL injection and could leak arbitrary message contents to any database the agent can reach. The instructions do not specify input sanitization, parameterized queries, or limits on what is stored.
Install Mechanism
There is no install spec (instruction-only), which lowers install risk, but the runtime depends on the psql client being present and a reachable PostgreSQL endpoint. The metadata did not declare psql as a required binary or provide an install path, creating an operational and security blind spot.
Credentials
The SKILL.md relies on $DATABASE_URL (a credential/connection string) but the skill declares no required environment variables or primary credential. Requesting access to a database connection is proportionate for storing meetings, but the omission in metadata is a mismatch and a red flag—users would not be prompted to provide or review the DB credential beforehand.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent 'always' presence or other elevated platform privileges. Autonomous invocation is allowed (platform default) but not in itself unusual.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install andara-meeting-minutes
  3. After installation, invoke the skill by name or use /andara-meeting-minutes
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of andara-meeting-minutes skill: - Captures meeting summaries and action items from voice or text cues. - Extracts topic, attendees, decisions, and action items from user input. - Saves meeting data and action items to PostgreSQL database. - Confirms successful saving and provides a structured summary reply in German.
Metadata
Slug andara-meeting-minutes
Version 1.0.0
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is Andara Meeting Minutes?

Capture meeting summaries and action items from voice or text. It is an AI Agent Skill for Claude Code / OpenClaw, with 210 downloads so far.

How do I install Andara Meeting Minutes?

Run "/install andara-meeting-minutes" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Andara Meeting Minutes free?

Yes, Andara Meeting Minutes is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Andara Meeting Minutes support?

Andara Meeting Minutes is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Andara Meeting Minutes?

It is built and maintained by atiati82 (@atiati82); the current version is v1.0.0.

💬 Comments