Security audit
Security checks for vulnerabilities and agentic risk
The skill is purpose-aligned for meeting notes, but it auto-saves raw pasted content while also telling users that nothing is stored.
Review before installing. Use this only in workspaces where saved meeting notes and todo files are appropriate, and avoid pasting secrets, HR/legal discussions, customer data, or private transcripts unless you are comfortable with raw content being retained locally.
The explicit instruction to preserve the original input exactly as pasted means any sensitive information in transcripts or copied notes will be written verbatim to disk. In the context of a meeting-notes skill, users are especially likely to include confidential business discussions, customer data, or personal information, so exact retention substantially raises the privacy and data leakage risk.
The FAQ explicitly tells users that nothing is stored, but the skill instructions direct the agent to save meeting notes, raw pasted content, and to-do data into workspace files. This creates a material mismatch between user expectations and actual data handling, which can lead users to paste sensitive transcripts, internal discussions, or personal data under false privacy assumptions.
The manifest description and later prose present the skill as applicable to virtually any text, not just clearly bounded meeting-note inputs. This broad scope makes it unclear when the skill should activate versus when a generic summarization or text-processing skill should be used.
The skill description emphasizes convenience and broad input support but does not prominently warn that pasted notes and transcripts are automatically saved, potentially with raw content preserved. Users may therefore disclose confidential meeting material without informed consent, making this a transparency and data-handling vulnerability.
Requiring preservation and storage of the user's full raw meeting input increases the risk of retaining secrets, personal data, legal discussions, credentials pasted by mistake, or other sensitive content far beyond what is needed for a summary. Long-term retention and later retrieval enlarge the exposure surface if the workspace is shared, synced, or inspected by other tools.
The skill says 'Just paste your notes and ask' and lists broad phrases like 'Summarize this meeting...' and 'Parse these notes...' without defining clear activation boundaries or exclusions. In a markdown skill description, this can cause unintended invocation because these phrases are common user requests that are not uniquely scoped to this specific skill.
The example explicitly promotes saving meeting notes, transcripts, attendee names, action items, and business details to persistent files and a to-do list, but provides no warning, consent guidance, retention limits, or handling precautions for sensitive personal or confidential corporate information. Because meeting notes commonly contain internal plans, customer issues, staffing details, and other sensitive data, normalizing automatic storage without privacy safeguards can lead to unintended disclosure or over-retention.
