synthesis-meeting-transcripts
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and downloads the
workspace-mcptool for multi-account support. start.shuses theuvxtool (from Astral) to install and run theworkspace-mcpserver from a remote registry.README.mdandSKILL.mdlink to thetaylorwilsdon/google_workspace_mcpGitHub repository as the source for the self-hosted component.- [COMMAND_EXECUTION]: The skill provides shell scripts (
start.sh,stop.sh,install-autostart.sh) to manage a local MCP server instance. install-autostart.shcreates system-level persistence usinglaunchdon macOS (~/Library/LaunchAgents/) andsystemdon Linux (~/.config/systemd/user/) to ensure the server starts on login. This is the intended and documented functionality for users choosing the self-hosted path.- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface due to its ingestion of external document content.
- Ingestion points:
optional-workspace-mcp/fetch-meeting.py(line 154) fetches meeting notes and transcripts from Google Drive via theget_drive_file_contenttool. - Boundary markers: The protocol instructions in
SKILL.mddo not specify delimiters or 'ignore' instructions when processing the document body. - Capability inventory: The skill has file-write capabilities in
optional-workspace-mcp/fetch-meeting.py(line 172) and instructions inSKILL.md(Step 4 and 5) to save content and update local project indices. - Sanitization: Output filenames are sanitized using a
slugifyfunction, but the content of the meeting transcript is written to local markdown files as-is.
Audit Metadata