meeting-minutes-ai
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes untrusted transcript data.
- Ingestion points: Untrusted data enters the agent context through the transcript input described in
SKILL.mdand is read from local files byscripts/extract_minutes.py. - Boundary markers: Absent; there are no instructions to use delimiters or ignore potentially malicious commands embedded within the transcript text.
- Capability inventory: The skill provides the ability to generate summary text and write markdown files to the local file system via the
scripts/extract_minutes.pyscript. - Sanitization: No input sanitization or validation is performed on the transcript content before it is processed.
- [SAFE]: The Python utility
scripts/extract_minutes.pyis implemented using standard libraries and contains no network operations, hardcoded credentials, or obfuscated code. It performs straightforward regex-based extraction and local file writes as described in the documentation.
Audit Metadata