gws-apps-script-push
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a documentation wrapper for the 'gws' command-line tool, facilitating the management of Google Apps Script projects. No suspicious or hidden scripts were found in the provided content.
- [INDIRECT_PROMPT_INJECTION]: While the skill involves processing local files (via the '--dir' flag) which could theoretically contain malicious instructions, the operation is limited to uploading content to a user-controlled Google script project. The skill explicitly requires the agent to confirm with the user before executing the write command, mitigating risks associated with automated execution of untrusted data.
- [COMMAND_EXECUTION]: The skill uses the 'gws' binary, which is a prerequisite for its functionality. The commands described are standard project management operations and do not show signs of parameter injection or privilege escalation.
Audit Metadata