Meeting Debrief

Security checks across malware telemetry and agentic risk

Overview

This skill does what it advertises: it turns meeting transcripts into a structured debrief and visual file, with optional CRM follow-up that users should review carefully.

Install only if you are comfortable storing meeting-derived content in the workspace. Review the generated Excalidraw file before sharing it, and approve CRM actions only after checking the exact contacts, notes, deals, tags, and fields that would be created or changed.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The skill explicitly instructs the agent to create and save an Excalidraw file in the current working directory without first obtaining clear user consent or warning that a local file will be written. In an agent environment, silent file creation is a side effect that can surprise users, overwrite expected workspace state, or be chained with other behaviors to persist sensitive meeting-derived data onto disk.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal