summarizer
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted transcript and dialogue data from external sources.\n
- Ingestion points: Transcripts are ingested via the
summarizeAPI endpoint or retrieved from S3 buckets as described inSKILL.mdandreferences/api-reference.md.\n - Boundary markers: The implementation guidance does not specify the use of delimiters or instructions to ignore embedded commands within the transcripts.\n
- Capability inventory: The skill serves as documentation and does not contain local executable scripts with sensitive system access or dangerous capabilities.\n
- Sanitization: No transcript content sanitization or validation is mentioned.\n- [SAFE]: All external references, URLs, and sample sources target official Zoom developer domains and repositories, which are recognized as trusted vendor resources.\n- [SAFE]: Sensitive credential usage (API keys and AWS secrets) is documented as being handled via environment variables and placeholders, conforming to security best practices.
Audit Metadata