Meeting Scheduler
Pass
Audited by Gen Agent Trust Hub on Jun 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core function of processing untrusted natural language inputs to drive automated actions.
- Ingestion points: The skill ingests untrusted data from the user's natural language meeting requests as described in step 1 of the 'Workflow' in
SKILL.md. - Boundary markers: There are no instructions for the agent to use delimiters or specifically ignore potential commands embedded within the meeting request text.
- Capability inventory: The skill possesses the capability to read calendar data and create/modify events via Google Calendar API, Microsoft Graph API, and Calendly endpoints, as well as sending email invitations.
- Sanitization: The skill description lacks any mention of sanitizing, escaping, or validating the input data before processing it or using it in API calls.
Audit Metadata