gws-reseller

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill interacts with external data sources through the Google Workspace Reseller API.
  • Ingestion points: Data is ingested from the Google Workspace API via methods such as customers.get, subscriptions.list, and resellernotify.getwatchdetails described in SKILL.md.
  • Boundary markers: There are no explicit instructions or delimiters provided to the agent to treat external API responses as untrusted data.
  • Capability inventory: The skill utilizes the gws CLI tool to perform operations including creating, updating, and deleting subscriptions and customer accounts.
  • Sanitization: The skill does not define specific sanitization or validation routines for data returned from the API before it is processed by the agent to determine subsequent actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 08:59 PM