transcript-analysis
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core function of processing untrusted external data.
- Ingestion points: The skill ingests untrusted text data from conversation transcript files (e.g., in the
voice-memos/directory). - Boundary markers: The instructions do not mandate the use of delimiters or boundary markers to isolate the untrusted transcript content from the agent's instructions.
- Capability inventory: The skill has file-system write access to the
00-Knowledgebase/extractions/directory to save analysis results. - Sanitization: There is no mention of sanitization, filtering, or validation of the input transcript data to prevent embedded instructions from being executed.
Audit Metadata