fathom-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate instructions for configuring Fathom AI API access using official service endpoints (
api.fathom.aiandfathom.video). - [SAFE]: The provided code examples use environment variable placeholders (
your-api-key-here) rather than hardcoded credentials, following security best practices. - [SAFE]: Explicit instructions are included to manage secrets in
.envfiles and to update.gitignoreto prevent credential exposure in repository history. - [INDIRECT_PROMPT_INJECTION]: The skill configures an attack surface for processing meeting transcripts and summaries which could contain untrusted data.
- Ingestion points: External meeting data retrieved via the
meetingsAPI endpoint inSKILL.md. - Boundary markers: None present in the connection test examples to separate data from system instructions.
- Capability inventory: Uses
Bash(curl:*)for data fetching andWrite/Editfor project configuration as specified inSKILL.md. - Sanitization: No specific content sanitization is implemented in these setup instructions.
Audit Metadata