meeting-notes
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data in the form of meeting notes and transcripts, which creates an indirect prompt injection surface.
- Ingestion points: User-pasted raw meeting notes, transcripts, or descriptions enter the agent context (SKILL.md).
- Boundary markers: Absent. There are no instructions or delimiters defined to tell the agent to ignore instructions embedded within the processed text.
- Capability inventory: The skill is configured to use the
create_docxtool via theoffice-mcpserver. - Sanitization: Absent. The skill does not specify any validation or sanitization for the input meeting data before processing.
- [NO_CODE]: The skill consists entirely of markdown instructions and templates. It does not contain any executable scripts, binary files, or automated installation commands.
Audit Metadata