spark-recipe-morning-standup
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources (emails and calendar events), which is inherent to its primary purpose as a communication summarizer.
- Ingestion points: Data enters the agent's context through the output of the
spark emailsandspark eventscommands. - Capability inventory: The skill's capabilities are limited to reading data and presenting it to the user. There are no file system writes, arbitrary network requests, or dangerous command executions identified.
- Boundary markers: The skill does not use specific delimiters or instructions to prevent the agent from obeying instructions that might be contained within the emails.
- Sanitization: The skill does not perform sanitization on the email content before presenting the summary.
Audit Metadata