meeting-insights-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources (meeting transcripts in formats such as .txt, .md, .vtt, .srt, and .docx) which represents an attack surface for indirect prompt injection.
- Ingestion points: The skill is designed to scan user-provided folders and ingest transcript data (SKILL.md, Instructions Section).
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions to separate the transcript data from the system prompt.
- Capability inventory: The skill focuses on analysis and reporting; it does not utilize high-risk tools for network communication, persistent storage, or arbitrary command execution.
- Sanitization: No sanitization or validation of the transcript content is implemented before the agent processes it.
Audit Metadata