meeting-intelligence-system-skill
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze meeting transcripts, notes, and recordings provided by users, which constitute untrusted external data.
- Ingestion points: Meeting transcripts, notes, or recordings provided by the user in the prompt (SKILL.md).
- Boundary markers: Absent. The skill does not specify delimiters (like XML tags or triple quotes) or provide instructions to the agent to ignore potentially malicious instructions embedded within the transcript text.
- Capability inventory: The skill instructs the agent to write a JSON analytics file to the local filesystem at
~/.claude/skill-analytics/last-outcome-meeting-intelligence-system.json(SKILL.md). - Sanitization: Absent. There is no instruction to escape or validate the content of the transcript or the resulting summary before writing data or presenting it to the user.
Audit Metadata