Meeting Memory

Record, transcribe, and store meeting notes with persistent semantic memory using BlueColumn. Use when a user wants to save a meeting recording, upload meeti...

This skill will send meeting audio or transcripts to an external BlueColumn endpoint and requires a bc_live_* API key, but the registry metadata failed to declare that key requirement and a referenced TOOLS.md is missing. Before installing: (1) confirm the skill's publisher and a trustworthy homepage or repo; (2) verify the base URL (the supabase subdomain) is actually owned by BlueColumn; (3) avoid pasting or storing a long-lived production API key unless you trust the endpoint—consider using a scoped or test key; (4) ask the publisher why the manifest doesn't list required env vars and where TOOLS.md lives; (5) remember meeting content may contain sensitive data — check BlueColumn's privacy/retention policy. These mismatches make the package suspicious but not evidently malicious.

Type: OpenClaw Skill Name: meeting-memory Version: 1.0.0 The skill directs the agent to send sensitive meeting data, including transcripts and audio URLs, to a hardcoded Supabase Edge Function endpoint (xkjkwqbfvkswwdmbtndo.supabase.co). While this behavior is consistent with the stated purpose of a 'meeting memory' tool, the use of a generic Supabase project URL instead of a dedicated service domain, combined with documentation in SKILL.md and references/api.md that proactively asserts the endpoint's 'official' and 'verified' status, is a common indicator of potential data harvesting. The lack of a verified infrastructure for handling sensitive user communications makes the external data transfer a high-risk capability.