Security audit

Meeting Mastery

Security checks for vulnerabilities and agentic risk

Overview

This meeting assistant is coherent and not deceptive, but it directs persistent storage of personal contact details and confidential meeting information without enough controls or consent guidance.

Install only if you are comfortable with the agent creating persistent local meeting and relationship records. Avoid storing sensitive personal details, confidential meeting notes, or regulated business data unless you choose a protected location and define your own retention and deletion process.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:274
Finding: Plaintext Persistence of Sensitive Meeting and Relationship Data
Content: View full analysis
30 days since contact (relationship at risk) ``` `SKILL.md:386-396`: ```text meetings/ ├── briefs/ # Pre-meeting briefs │ └── YYYY-MM-DD-[title].md ├── notes/ # Meeting notes │ └── YYYY-MM-DD-[title].md ├── contacts/ # Relationship cards │ └── [name].yaml ├── actions/ # Action item tracker │ └── active-actions.json └── audit/ # Weekly meeting audits └── YYYY-WW-audit.md ``` `SKILL.md:408`: ```markdown - **Confidential meetings:** Mark notes as `CONFIDENTIAL` — don't include in weekly audit details. ``` ### Technical Analysis The Skill directs the agent to collect and persist sensitive information in ordinary Markdown, YAML, and JSON files. The stored information may include personal details, communication preferences, relationship history, meeting discussions, sent ...[truncated 2049 chars]
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The README explicitly promotes attendee research and persistent relationship memory across meetings, which implies collection, retention, and reuse of personal data without any privacy notice, consent guidance, retention limits, or handling safeguards. In a meeting-assistant context, this can lead users to process sensitive personal or business information in ways that violate privacy expectations, internal policy, or regulatory requirements.
Content: No source excerpt is available for this finding.

Ssd 3

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The relationship-memory section directs long-term retention and resurfacing of personal details across meetings, enabling profiling of individuals over time. In context, this is more dangerous because the skill is designed to aggregate cross-meeting history and sensitive interpersonal notes, which can create privacy harms, bias, and unintended disclosure far beyond a single meeting workflow.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill explicitly instructs the agent to collect and persist detailed personal information about contacts, including communication style, family details, dietary preferences, and sentiment trends, without any consent, minimization, retention, or access-control guidance. This creates a privacy and compliance risk because the agent is encouraged to build informal dossiers that may exceed what is necessary for meeting preparation and could expose sensitive personal data if misused or leaked.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The skill defines persistent storage for meeting briefs, notes, contacts, and action trackers, but provides no safeguards around sensitive business or personal data likely to be stored in those files. Because meeting notes may include confidential decisions, attendee data, and follow-up obligations, unqualified persistence increases the chance of unauthorized retention, overcollection, and downstream disclosure.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.