fireflies-rate-limits
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines functions to fetch transcript data, including overviews and action items, from the Fireflies.ai API. This data represents untrusted external content that could contain instructions designed to influence the agent's behavior.
- Ingestion points:
batchFetchTranscriptsfunction inSKILL.mdfetches data from the Fireflies.ai GraphQL endpoint. - Boundary markers: The provided code does not implement specific delimiters or 'ignore' instructions for the fetched content.
- Capability inventory: The skill performs network requests via the
fetchAPI toapi.fireflies.ai. - Sanitization: No sanitization, validation, or escaping of the transcript text or summaries is performed before the data is returned for processing.
- [EXTERNAL_DOWNLOADS]: The skill references the
p-queueNode.js package to manage request concurrency and intervals. This is a common utility package for rate limiting in Node.js environments.
Audit Metadata