googlemeet-automation
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious code or unauthorized access patterns were found. The skill uses official Composio tools for Google Meet and Calendar automation.
- [EXTERNAL_DOWNLOADS]: The skill references rube.app and composio.dev URLs. These are official vendor resources belonging to the author ComposioHQ and do not represent a security risk.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by processing external data. 1. Ingestion points: Untrusted data enters the context via GOOGLECALENDAR_CREATE_EVENT, GOOGLECALENDAR_PATCH_EVENT, and GMAIL_SEARCH_PEOPLE (queries, summaries, and descriptions). 2. Boundary markers: There are no instructions to use boundary markers or delimiters for external data. 3. Capability inventory: The skill allows the agent to create and modify meeting spaces and calendar events. 4. Sanitization: The skill does not specify any sanitization, validation, or escaping logic for the incoming external data.
Audit Metadata