meeting-notes-to-linkedin-post
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-supplied data in the form of meeting notes and transcripts, which could theoretically contain malicious instructions.
- Ingestion points: Meeting notes, call transcripts, or CRM summaries provided by the user in the chat.
- Boundary markers: None explicitly defined to separate instructions from the transcript content.
- Capability inventory: The skill itself is instructional and text-based; it suggests the use of external tools for network operations (publishing).
- Sanitization: The skill contains robust instructions to "Strip every identifying detail" and requires the agent to adhere to a quality bar that rejects output if identities could be guessed.
- [EXTERNAL_DOWNLOADS]: The skill recommends downloading additional resources and connecting to external services controlled by the vendor.
- Evidence: Suggests installing a related skill using
npx skills add liftli-ai/linkedin-agent-skills. - Evidence: Recommends adding an MCP (Model Context Protocol) server via
https://mcp.liftli.ai/mcp. - Evidence: Provides links to vendor-owned documentation and web tools at
liftli.ai. - [COMMAND_EXECUTION]: The instructions provide the user with shell commands to execute to extend the agent's functionality.
- Evidence: Provides command
npx skills add liftli-ai/linkedin-agent-skills --skill linkedin-voicefor skill installation. - Evidence: Provides command
claude mcp add --scope user --transport http liftli https://mcp.liftli.ai/mcpfor environment configuration. - Evidence: Provides command
claude mcp login liftlifor authentication.
Audit Metadata