wps-meeting-minutes
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the python-docx library from the public Python Package Index (PyPI), which is a standard procedure for document processing tasks.
- [COMMAND_EXECUTION]: The Bash tool is utilized to run pip installation commands and likely to manage file operations related to the generated documents.
- [PROMPT_INJECTION]: The skill ingests untrusted user content such as meeting notes and voice-to-text transcripts, which constitutes an indirect prompt injection surface.
- Ingestion points: Meeting notes provided via the skill arguments as described in SKILL.md.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used in the prompt construction.
- Capability inventory: The skill is granted access to the Bash, Write, Edit, and Read tools.
- Sanitization: No input sanitization or verification logic is present to handle potentially malicious instructions in user notes.
Audit Metadata