gws-sheets-append
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
gwscommand-line utility to perform spreadsheet modifications. This is the primary intended function of the skill and uses a tool identified in the requirements metadata. - [INDIRECT_PROMPT_INJECTION]: The skill accepts untrusted data through the
--valuesand--json-valuesflags which are interpolated into the command line. - Ingestion points: External data is ingested via command flags defined in
SKILL.md. - Boundary markers: There are no explicit delimiters or instruction-ignore warnings defined for the input values in this skill file.
- Capability inventory: The skill possesses the capability to write data to external Google Sheets spreadsheets via the
gwstool. - Sanitization: No sanitization, escaping, or validation of the input strings is described in the skill's instructions.
Audit Metadata