meeting-insights-analyzer
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from meeting transcripts, which can be a vector for indirect prompt injection.
- Ingestion points: The skill scans local directories for transcript files in various formats, including .txt, .md, .vtt, .srt, and .docx (SKILL.md).
- Boundary markers: The instructions do not define clear delimiters or provide the agent with specific guidance to ignore embedded instructions within the transcript text.
- Capability inventory: The skill is primarily focused on text analysis and summarization of existing files; it does not explicitly request network or file-writing capabilities.
- Sanitization: There is no evidence of content sanitization or validation of the ingested transcript files before they are processed.
Audit Metadata