meeting-notes
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted data (meeting notes and transcripts), which could contain malicious instructions designed to influence the agent's behavior during the summarization process.
- Ingestion points: Raw meeting notes, transcripts, or audio summaries provided by the user as described in the 'How to Use' section of SKILL.md.
- Boundary markers: The instructions lack explicit delimiters or specific 'ignore' directives to distinguish between user instructions and the data being processed.
- Capability inventory: The skill is configured to use the
create_docxtool from theoffice-mcpserver, allowing it to generate persistent files based on potentially poisoned input (SKILL.md frontmatter). - Sanitization: There are no instructions for the agent to sanitize, escape, or validate the content of the meeting notes before processing or tool usage.
Audit Metadata