meeting-brief
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell and Node.js scripts to coordinate its workflow. It leverages system utilities such as
gcalclito fetch calendar data and the GitHub CLI (gh) to retrieve developer profile information. - [EXTERNAL_DOWNLOADS]: Conducts automated web research on meeting attendees by utilizing the
web_searchtool and GitHub CLI to extract professional data from public platforms like LinkedIn and GitHub. This is a core function of the skill. - [DATA_EXFILTRATION]: Sends generated research briefs to the user's verified email address via the
gmailskill and optionally to a user-configured Slack webhook usingcurl. These network operations target well-known services and are restricted to delivering content to the user. - [PROMPT_INJECTION]: Processes external content, including calendar descriptions and web search results, by interpolating them into AI prompts for summary generation. This identifies a surface for indirect prompt injection, where malicious text in a public profile could attempt to influence the brief's output, though risks are mitigated by the localized nature of the delivery.
- Ingestion points: Meeting titles and descriptions from
scripts/check_calendar.shand web/GitHub data gathered inscripts/research_person.js. - Boundary markers: Prompt templates in
scripts/generate_brief.jsandscripts/research_person.jsuse markdown headings and JSON stringification to delineate external data from instructional text. - Capability inventory: Execution of local
bashandnodescripts, local file system writes for caching research and logging sent briefs, and access to thegmailandweb_searchcapabilities. - Sanitization: The skill includes
scripts/format_for_slack.shto sanitize and reformat markdown for Slack compatibility, while the prompt architecture uses structured templates for data handling.
Audit Metadata