Meeting Summary Generator

AI-powered meeting summary generator. Convert meeting notes into professional summaries and action items.

This skill appears to do what it says (generate meeting summaries using the local 'sloan' agent) but has a few red flags: 1) index.js contains a hard-coded SKILLPAY merchant key — this exposes a secret in the package and is poor practice; consider whether you trust the publisher or replace it with your own key. 2) SKILL.md lists OPENCLAW_GATEWAY_TOKEN even though code doesn't use it — minor inconsistency. 3) The CLI spawns the 'openclaw' agent and passes your meeting notes as the prompt; those notes may be sent to whatever backend the OpenClaw agent uses, so avoid including highly sensitive information. 4) package-lock uses third-party mirrors (mirrors.tencentyun.com); if you care about supply-chain provenance, audit dependencies or install from a vetted source. If you proceed: review the index.js yourself, set SKILLPAY_MERCHANT_KEY to your own merchant/key if required, test in offline/test mode (--test) before enabling payments, and ensure the 'openclaw' binary and remote endpoints are ones you trust.

Type: OpenClaw Skill Name: meeting-summary-generator Version: 1.1.2 The skill exhibits several risky capabilities in `index.js`, including local file system access (`fs.readFileSync`), external network communication (`axios.post` to `api.skillpay.me`), and process execution (`child_process.spawn`). While these functions are plausibly required for the stated purpose of generating summaries and processing payments, the inclusion of a hardcoded merchant secret key and the lack of input sanitization when constructing the AI prompt (allowing for potential prompt injection) meet the threshold for a suspicious classification.