skills/crustdata/skills/meeting-prep/Gen Agent Trust Hub

meeting-prep

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from external sources such as social media posts, news articles, and job descriptions to enrich meeting briefs. This data processing creates a surface for indirect prompt injection. 1. Ingestion points: Data retrieved via social_post_list_live, web_search_live, and company news groups. 2. Boundary markers: There are no explicit instructions to ignore or isolate instructions embedded within external data. 3. Capability inventory: The agent can execute scripts on a remote server and access local configuration files or connected CRM data. 4. Sanitization: No specific filtering or escaping of external content is specified before processing.
  • [DYNAMIC_EXECUTION]: The skill's primary function involves the agent generating JavaScript code blocks which are then sent to a remote MCP server's execute tool. This dynamic script assembly is the standard method for querying the Crustdata platform but involves the runtime execution of AI-generated logic.
  • [DATA_EXFILTRATION]: The skill can optionally access sensitive information from a user's CRM, email, and call recordings to sharpen meeting briefs. While this access is intended for context enrichment, it involves handling sensitive business data within the agent's context.
  • [EXTERNAL_DOWNLOADS]: The skill connects to and retrieves data from a remote Model Context Protocol (MCP) server located at install.crustdata.com. This is the official infrastructure provided by the vendor for the skill's data retrieval and enrichment capabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 01:10 PM