meeting-prep-debrief
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill researches external entities (companies and people) using web search and fetch tools. Malicious content hosted on these external websites could potentially influence the agent's output or behavior.
- Ingestion points: Company websites, news articles, and LinkedIn profiles accessed via
web_searchandweb_fetchin the 'Research' step of the 'Preparation Workflow'. - Boundary markers: The skill does not define specific delimiters (like XML tags) or 'ignore embedded instructions' warnings for the data fetched from the web.
- Capability inventory: The skill uses fetched data to generate discussion points, meeting starters, anticipated objections, and draft follow-up emails.
- Sanitization: There is no evidence of sanitization, escaping, or validation of the external content before it is processed and summarized for the user.
Audit Metadata