Meeting Notes Summarizer

Generates concise meeting summaries highlighting key decisions, action items with owners, follow-up dates, and a brief 3-sentence overview.

This skill appears to do what it says: it sends the meeting transcript you pipe in to the Anthropic API and returns a markdown summary. Before installing or running it: 1) be aware the entire transcript is sent to api.anthropic.com — do not forward sensitive or confidential meeting content unless you trust Anthropic and accept their data-handling and billing policies; 2) the registry metadata omitted required runtime items — SKILL.md and the script require ANTHROPIC_API_KEY and the script calls python3 in addition to bash and curl, so ensure those are available and the required env var is set; 3) the skill's source/homepage is unknown — prefer running the provided summarize.sh in a controlled environment (container or isolated VM) and inspect the script yourself; 4) ask the publisher to update the registry entry to declare the ANTHROPIC_API_KEY and python3 requirement and to provide a homepage or source repo for transparency. These mismatches explain the 'suspicious' rating even though the code itself is not overtly malicious.

Type: OpenClaw Skill Name: shelly-meeting-summarizer Version: 1.0.0 The skill bundle is benign. The `summarize.sh` script securely handles user input by using `python3 -c 'import sys,json; print(json.dumps(sys.stdin.read()))'` to properly JSON-escape the transcript before sending it to the Anthropic API. This prevents shell and JSON injection vulnerabilities. The script's purpose is clearly defined as summarizing meeting transcripts using an LLM, and it makes a legitimate API call to `api.anthropic.com` using an environment variable for the API key. There is no evidence of data exfiltration, unauthorized execution, persistence mechanisms, or prompt injection attempts against the OpenClaw agent in `SKILL.md`.