meeting-notes

Pass

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
  • [PROMPT_INJECTION]: The skill processes untrusted external data in the form of meeting notes and transcripts, which creates an indirect prompt injection surface.
  • Ingestion points: User-pasted raw meeting notes, transcripts, or descriptions enter the agent context (SKILL.md).
  • Boundary markers: Absent. There are no instructions or delimiters defined to tell the agent to ignore instructions embedded within the processed text.
  • Capability inventory: The skill is configured to use the create_docx tool via the office-mcp server.
  • Sanitization: Absent. The skill does not specify any validation or sanitization for the input meeting data before processing.
  • [NO_CODE]: The skill consists entirely of markdown instructions and templates. It does not contain any executable scripts, binary files, or automated installation commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 8, 2026, 07:46 PM
Security Audit — agent-trust-hub — meeting-notes