meeting-prep
Fail
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The file
references/experts.mdcontains a directory of sales practitioners and links to their platforms. Automated security scans flagged specific domains such askeithrosen.com(FakeT) andforgetthefunnel.com(Blacklist). Although these links serve as documentation for cited sales frameworks, they point to external domains with reported reputation issues. Thereferences/experts.mdfile itself was also flagged asFileRepMalwareby reputation-based scanners, likely due to the density of external links.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external data through thescripts/check-output.pyscript, which validates the structure of meeting briefs.\n * Ingestion points: The scriptscripts/check-output.pyreads content from a file path provided as a command-line argument.\n * Boundary markers: No explicit boundary markers or instructions are used for the processed content to prevent the agent from interpreting instructions contained within the validated files.\n * Capability inventory: The skill has the capability to read local files via the Python script and report missing metadata or sections to the agent console.\n * Sanitization: No sanitization or escaping is performed on the input file content, though the script's logic is restricted to presence-checking for specific headers.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 8 malicious URL(s) - DO NOT USE
Audit Metadata