recording-to-rfp-response
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, specifically RFP requirements lists and walkthrough recording transcriptions.
- Ingestion points: RFP requirements list and video recording analysis (Workflow Steps 2 and 3 in SKILL.md).
- Boundary markers: The skill does not explicitly instruct the agent to use delimiters or ignore embedded instructions within the provided RFP text.
- Capability inventory: Tool capabilities provided by the
clueso-mcpconnector for video trimming, captioning, narration synthesis, and article authoring. - Sanitization: The workflow incorporates human-in-the-loop validation, requiring users to review rendered previews and captions before final export (Workflow Step 8).
- [EXTERNAL_DOWNLOADS]: Provides instructions for the user to configure the
clueso-mcpconnector using the vendor's official endpoint athttps://connect.clueso.io/mcp.
Audit Metadata