gws-slides

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill enables the agent to fetch and process content from Google Slides presentations, which is an external and untrusted data source.
  • Ingestion points: The presentations.get method is used to read existing presentation data into the agent's context (SKILL.md).
  • Boundary markers: The skill instructions do not specify any delimiters or instructions for the agent to ignore or isolate embedded instructions within the slide content.
  • Capability inventory: The skill has the capability to execute shell commands via the gws CLI tool to create, read, and update presentations.
  • Sanitization: There is no documentation or instruction for sanitizing, validating, or filtering the data retrieved from Google Slides before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 08:59 PM