← Back to Skills Marketplace
bavxhack

Create secure videoconference

by bavxhack · GitHub ↗ · v1.0.1
cross-platform ✓ Security Clean
595
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install create-videoconference
Description
Default video conferences via Meetling. Instant calls always use /m/ rooms + share payload for Claw default sending. Scheduled calls return link + email invi...
README (SKILL.md)

Meetling Default (Video Conferences) — Secure

Hardcoded Meetling host

This skill always uses: https://app.meetling.de

No environment variable can change the base URL.

Security: contacts loading

  • Contacts are loaded only from ./contacts.json (current working directory).
  • No environment variable can override the file path.
  • The skill does not output the contacts file path.

If contacts.json is missing or invalid JSON, the skill continues with an empty map and marks recipients as unresolved.

Behavior

Instant / Ad-hoc (always /m/)

Triggers if ANY is true:

  • Text contains “now / right now / asap / immediately”
  • OR contains German equivalents “jetzt / jetzt gleich / sofort / gleich”
  • OR start_time is within MEETLING_INSTANT_THRESHOLD_MINUTES minutes from now
  • OR participants are present but no start_time is provided

Returns:

Scheduled

If start_time is more than the threshold minutes in the future:

  • returns email_invite (subject + body) plus the Meetling link

Note: This skill does not automate Meetling dashboard creation or Meetling-sent invites (requires an official API or robust UI automation).

Usage Guidance
This skill appears to do exactly what it claims: create Meetling /m/ links and produce share/email payloads. Before installing, review the contacts.json you will place in the working directory — it will be read (and the skill will output resolved recipient IDs/channels in the JSON share payload). Ensure contacts.json does not contain secrets you wouldn't want included in the skill's output. Also confirm you are comfortable with generated Meetling links being constructed from the hardcoded base URL (https://app.meetling.de). If you want additional assurance, run the index.js locally with sample inputs to inspect outputs before enabling the skill.
Capability Analysis
Type: OpenClaw Skill Name: create-videoconference Version: 1.0.1 The OpenClaw skill 'create-videoconference' is benign. The code and documentation consistently demonstrate adherence to security best practices. The Meetling host is hardcoded, preventing redirection. Contacts are loaded exclusively from a fixed path (`./contacts.json` in the current working directory) with a size limit, mitigating path traversal and Local File Inclusion (LFI) risks. There is no evidence of data exfiltration, unauthorized network calls, external command execution, persistence mechanisms, or prompt injection attempts in the `SKILL.md` or `README.md` files. The skill's behavior is fully aligned with its stated purpose.
Capability Assessment
Purpose & Capability
Name/description (create Meetling links, share payloads, email templates) align with required binary (node), the two env vars (threshold and default language), and the single code file which builds /m/ links. No unrelated credentials or services requested.
Instruction Scope
SKILL.md and index.js only read ./contacts.json (explicitly stated and enforced), parse input (stdin/argv), compute mode, build a slug and URL, and emit JSON output. All file reads and behaviors are scoped to producing the described outputs; no arbitrary file or system scanning is present.
Install Mechanism
No install spec (instruction-only skill) and packaged code is simple Node.js with no external installs or downloads. Requiring node is proportional and expected; package.json is minimal.
Credentials
Only MEETLING_INSTANT_THRESHOLD_MINUTES and SKILL_LANGUAGE_DEFAULT are declared and used. No secret tokens or unrelated environment variables are requested.
Persistence & Privilege
Skill does not request always:true, does not modify other skills or system settings, and has normal user-invocable/autonomous defaults. It only reads a local contacts.json file in the working directory.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install create-videoconference
  3. After installation, invoke the skill by name or use /create-videoconference
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
create-videoconference 1.0.1 changelog: - Tightened security: The Meetling base URL is now always set to https://app.meetling.de and cannot be changed via environment variables. - Contacts are loaded only from ./contacts.json in the working directory; the file path is no longer overridable by environment variables. - If contacts.json is missing or invalid, the skill proceeds with an empty map and marks recipients as unresolved. - Removed use of MEETLING_BASE_URL and CONTACTS_JSON environment variables; only MEETLING_INSTANT_THRESHOLD_MINUTES and SKILL_LANGUAGE_DEFAULT remain.
v1.0.0
initial upload of the skill. This skill enables claw to create videoconferences.
Metadata
Slug create-videoconference
Version 1.0.1
License
All-time Installs 0
Active Installs 0
Total Versions 2
Frequently Asked Questions

What is Create secure videoconference?

Default video conferences via Meetling. Instant calls always use /m/ rooms + share payload for Claw default sending. Scheduled calls return link + email invi... It is an AI Agent Skill for Claude Code / OpenClaw, with 595 downloads so far.

How do I install Create secure videoconference?

Run "/install create-videoconference" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Create secure videoconference free?

Yes, Create secure videoconference is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Create secure videoconference support?

Create secure videoconference is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Create secure videoconference?

It is built and maintained by bavxhack (@bavxhack); the current version is v1.0.1.

💬 Comments