outlook-calendar-automation
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from Outlook calendar events, creating a surface for potential injection attacks.
- Ingestion points: Event details are retrieved as described in
SKILL.mdusingOUTLOOK_LIST_EVENTS,OUTLOOK_GET_EVENT, andOUTLOOK_GET_CALENDAR_VIEW. - Boundary markers: The instructions lack explicit delimiters or instructions for the agent to disregard embedded commands within event data.
- Capability inventory: The skill utilizes tools for modifying calendar data and sending meeting invitations (
OUTLOOK_CALENDAR_CREATE_EVENT,OUTLOOK_UPDATE_CALENDAR_EVENT). - Sanitization: There are no instructions for sanitizing or validating content retrieved from the
bodyorsubjectfields of calendar events.
Audit Metadata