fireflies-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic execution syntax in SKILL.md to perform an environment check via npm list at load time.
- [COMMAND_EXECUTION]: Shell commands including grep and jq are used to scan files and parse API responses as part of the migration process.
- [EXTERNAL_DOWNLOADS]: The skill communicates with api.fireflies.ai and docs.fireflies.ai for schema updates and documentation, which are official endpoints for the targeted service.
- [INDIRECT_PROMPT_INJECTION]: A vulnerability surface exists when processing untrusted local content. Ingestion points: Local source files scanned in SKILL.md. Boundary markers: Absent. Capability inventory: Bash, Read, Write, and Edit tools. Sanitization: No explicit filtering of the external source code content is specified.
Audit Metadata