Security audit
Security checks for vulnerabilities and agentic risk
The skill is a coherent ParrotNotes connector, but its broad auto-invocation can access sensitive meeting notes even when the user may not have explicitly meant ParrotNotes.
Install only if you are comfortable letting the agent access ParrotNotes meeting content through the MCP connector. Be especially careful with ambiguous requests about meetings or transcripts, and confirm before saving or overwriting insights in ParrotNotes.
The trigger description is broad enough to activate on generic requests about meetings, notes, transcripts, action items, translation, or repurposing content, even when the user did not explicitly mean ParrotNotes. This can cause unintended tool use against a connected external data source, creating privacy and authorization risk through over-collection or retrieval of sensitive meeting content.
The skill enables implicit invocation without any visible trigger constraints or narrowing conditions, which can cause the agent to auto-select this connector whenever a user mentions meetings, notes, transcripts, or similar terms. Because the connected MCP tool can access and summarize potentially sensitive meeting notes, broad auto-invocation increases the chance of unintended data access, disclosure, or actions on the user's ParrotNotes content.
No suspicious patterns detected.
