lark-workflow-standup-report
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
lark-clitool to get calendar and task information, which is consistent with its stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources such as meeting summaries and task descriptions, which presents a surface for indirect prompt injection; however, this is an inherent risk for any skill that processes user-controlled data for summarization.
Audit Metadata