transcript-to-content

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes basic shell commands such as ls, grep, and cp to locate and manage files within the user's project directory (/home/ubuntu/projects/). These operations are consistent with the skill's workflow for analyzing source transcripts and managing brand assets.
  • [PROMPT_INJECTION]: The skill processes external data in the form of meeting transcripts. While it uses a structured extraction process to convert conversational data into authoritative instructions, it represents an indirect prompt injection surface. This is a common characteristic of skills that process untrusted user-supplied content, and the skill's focus on extraction rather than direct command execution helps mitigate this risk.
  • [SAFE]: No malicious patterns such as remote code execution, credential harvesting, or persistence mechanisms were identified. The skill correctly instructs the agent to use local reference files and platform-specific tools for its core functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 04:56 PM