Meeting Efficiency Pro

AI-powered meeting optimization tool that analyzes calendar events, provides efficiency scores, extracts action items, and automates follow-ups. Save 20%+ of...

Key points to consider before installing: - Provenance: the registry metadata lists the source as 'unknown' but package.json references a GitHub URL and ClawHub; verify where the package will come from (official ClawHub/NPM) and confirm the publisher identity before installing or running setup. - Secrets: this skill requires AI API keys, calendar OAuth credentials, and optional task-manager or SMTP tokens. Those are not declared in the registry metadata — treat that as a red flag. Only provide credentials after you trust the publisher, and prefer temporary or scoped API keys where possible. - Local config storage: the skill uses config/default.json to hold settings; API keys placed there will be stored in plaintext. Consider using environment variables, a secrets manager, or limiting file permissions. Inspect scripts/setup.js to see whether it leaks any data or sends configuration to external endpoints during setup. - Runtime commands: setup runs node/npm and executes 'npm install' via child_process.exec (present in index.js). Running setup will cause packages and any install scripts to run on your machine. If you need to audit, run 'npm install' inside a sandbox/container first. - Files/scripts not fully shown: demo.js and setup.js were present but not shown in full; review those files for network calls or unexpected behavior before trusting the skill. - Least privilege: create or use scoped API credentials (e.g., a limited OpenAI key, calendar account with limited access) and avoid reusing high-privilege or personal keys. - If unsure: run the skill in an isolated environment (VM or container) and audit network activity during initial setup and first runs. If the publisher/publish date is unexpected or you cannot verify the source, prefer to avoid installing it on production devices. If you want, I can: 1) look through the full contents of scripts/setup.js and scripts/demo.js to check for network calls or data exfiltration patterns; or 2) provide a checklist of what to verify in the package.json + repo before proceeding.

Type: OpenClaw Skill Name: meeting-efficiency-pro Version: 1.0.1 The 'meeting-efficiency-pro' skill is a legitimate productivity tool designed to analyze calendar events and meeting notes. The codebase consists of standard Node.js logic for processing text, calculating efficiency scores based on meeting metadata, and generating reports. While the tool requests sensitive information such as AI API keys and calendar tokens, these are stored locally in a configuration file (config/default.json) and used as expected for the stated functionality. There is no evidence of data exfiltration, malicious execution, or prompt injection attacks in the SKILL.md or other files.