gws-sheets-read
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted external data from Google Sheets into the agent's context, creating a surface for indirect prompt injection attacks.
- Ingestion points: Content retrieved from the spreadsheet identified by the
--spreadsheetand--rangeflags via thegwsCLI tool (SKILL.md). - Boundary markers: The instructions do not specify any delimiters or safety prompts to ensure the agent ignores potentially malicious instructions embedded within the spreadsheet cells.
- Capability inventory: The skill utilizes the
gwsbinary to perform read operations on Google Workspace spreadsheets. - Sanitization: There is no evidence of content sanitization or validation performed on the spreadsheet data before it is processed by the agent.
Audit Metadata