gws-drive
Pass
Audited by Gen Agent Trust Hub on May 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the 'gws' system binary to execute Google Drive operations as specified in the frontmatter requirements and CLI documentation in SKILL.md.
- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it is designed to ingest and process content from external Google Drive files.
- Ingestion points: File content retrieved via 'gws drive files get' (with alt=media) or 'gws drive files download' as documented in SKILL.md.
- Boundary markers: No explicit delimiters or instructions are provided in SKILL.md to protect the agent from instructions embedded within retrieved file content.
- Capability inventory: The skill provides extensive file management capabilities (create, update, delete, copy) and permission management via the 'gws' CLI (SKILL.md).
- Sanitization: There is no evidence of sanitization or validation of external content before it is processed by the agent.
Audit Metadata