agency-docs-updater
Automates the publishing of Claude Code lab meetings by managing transcripts, video uploads, and documentation generation.
Install this skill
Security score
The agency-docs-updater skill was audited on Apr 8, 2026 and we found 21 security issues across 3 threat categories, including 6 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 16 | Look for `~/Brains/brain/${DATE}-claude-code-lab-02.md`. If it exists, read it and extract `share_url` and `fathom_id` from its YAML frontmatter. |
Template literal with variable interpolation in command context
| 28 | - `VIDEO_NAME` = `${DATE}-claude-code-lab-02` |
Template literal with variable interpolation in command context
| 34 | First check if `~/Brains/brain/${VIDEO_NAME}.mp4` already exists and is > 1MB. If so, skip this step. |
Template literal with variable interpolation in command context
| 38 | ```bash |
Template literal with variable interpolation in command context
| 44 | ```bash |
Template literal with variable interpolation in command context
| 57 | ```bash |
Template literal with variable interpolation in command context
| 80 | ```bash |
Template literal with variable interpolation in command context
| 89 | ```bash |
Template literal with variable interpolation in command context
| 98 | Read the full Fathom transcript from `${FATHOM_FILE}`. |
Template literal with variable interpolation in command context
| 133 | ``` |
Template literal with variable interpolation in command context
| 212 | ```bash |
Template literal with variable interpolation in command context
| 237 | 2. **Copy lesson HTML to public**: If `~/ai_projects/claude-code-lab/lesson-generator/${DATE}.html` exists, copy it to `~/Sites/agency-docs/public/${DATE}-claude-code-lab-XX.html` (where XX is the lab |
Template literal with variable interpolation in command context
| 238 | ``` |
Template literal with variable interpolation in command context
| 360 | 1. **Wrong YouTube title** — Without `--title` flag, LLM generated "Клод Код Лаб" instead of proper meeting name. Fixed: added `--title "${MEETING_TITLE}"` to Step 3 using frontmatter title |
Access to hidden dotfiles in home directory
| 19 | 1. Run `~/.claude/skills/calendar-sync/sync.sh` to sync today's calendar |
Access to hidden dotfiles in home directory
| 39 | cd ~/Brains/brain && python3 ~/.claude/skills/fathom/scripts/download_video.py \ |
Access to hidden dotfiles in home directory
| 213 | python3 ~/.claude/skills/agency-docs-updater/scripts/update_meeting_doc.py \ |
External URL reference
| 76 | ✓ YouTube video: https://www.youtube.com/watch?v=VIDEO_ID |
External URL reference
| 130 | Determine the meeting page URL: `https://agency-lab.glebkalinin.com/docs/claude-code-internal-XX/meetings/NN` (where XX = lab number, NN = meeting number). |
External URL reference
| 145 | https://agency-lab.glebkalinin.com/docs/claude-code-internal-XX/meetings/NN |
External URL reference
| 148 | https://agency-lab.glebkalinin.com |