📦 Meeting Prep Agent — 会前智研助手
v1.1.0自动扫描日程，抓取参会人 LinkedIn、公司动态、共同关系，一键生成含话题破冰与背景信息的会前简报，让你随时自信入场。
0· 1.2k·4 当前·4 累计
by @audsmith28下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceThe skill's stated functionality (automated web research of attendees) is plausible, but the shipped scripts are placeholders that do not actually perform the promised web scraping and the declared requirements are minimal — this mismatch and the potential for future network/data access merit caution.
评估建议
This skill is not outright malicious, but there are important inconsistencies and privacy implications to consider before enabling it:
- The description promises live web research (LinkedIn profiles, mutual connections, recent news), but the included scripts currently produce mock data rather than performing web fetches. That could mean the skill is a template/incomplete or that real web-scraping/network code may be added later. Treat the current package as a scaffolding, not a finished scraper...详细分析 ▾
ℹ 用途与能力
The skill's name/description (meeting research using LinkedIn, news, mutual connections) aligns with needing calendar access (it declares dependency on the 'gog' calendar skill and GOOGLE_CALENDAR_ENABLED). However, performing reliable LinkedIn/company research or mutual-connection mapping typically requires additional tooling, APIs, or credentials (or explicit web-fetch code). The package only requests a single env var (GOOGLE_CALENDAR_ENABLED) and relies on 'gog' for calendar access, which is minimal but not obviously sufficient for the full advertised capability.
ℹ 指令范围
SKILL.md instructs the agent to fetch LinkedIn profiles, news, and mutual connections, and to auto-trigger before events. The included scripts (prep.sh, auto-prep.sh, brief.sh) are scoped to reading the skill's config, producing and storing briefs, and calling a (commented) gog calendar integration. Critically, the research functions in prep.sh are mock placeholders that return generated data rather than performing live web_search/web_fetch calls. There are no instructions in the shipped scripts that read unrelated system files or exfiltrate data, but SKILL.md implies external web queries that the current code does not implement.
✓ 安装机制
No install spec — instruction-only with accompanying scripts — so nothing is downloaded from third-party URLs at install time. Scripts are provided as plain shell files; that is low-install risk compared with arbitrary remote installers.
ℹ 凭证需求
The skill declares a single required env var (GOOGLE_CALENDAR_ENABLED) and a dependency on the gog skill for calendar access, which is proportionate for calendar-triggered behavior. That said, the skill promises LinkedIn/news research and 'mutual connections' mapping without requesting any LinkedIn/CRM/API credentials or documenting how those data are accessed — an omission that could indicate incomplete implementation or future changes that would require additional secrets. setup.sh also checks for the existence of gog's config file (~/.config/gog/config.json), meaning the skill will rely on other local credential artifacts even though they are not explicitly listed in requires.env.
✓ 持久化与权限
always is false; the skill does not request forced always-on installation. Scripts create and manage files under the user's ~/.config/meeting-prep directory (config.json, briefs, logs, history) which is a normal and limited footprint. The skill does not modify other skills or global agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/2/11
v1.1.0: Full working implementation with calendar integration and attendee research
● 可疑
安装命令
点击复制官方npx clawhub@latest install meeting-prep-agent
镜像加速npx clawhub@latest install meeting-prep-agent --registry https://cn.longxiaskill.com