gws-vault
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute the 'gws' command-line binary to interact with Google Vault API resources. It defines subcommands for managing matters, permissions, and long-running operations.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from the Google Vault API, creating a potential surface for indirect prompt injection. * Ingestion points: Data is ingested through 'gws vault' command outputs, including matter names, descriptions, and saved query results. * Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in this file; it relies on a referenced shared skill for security rules. * Capability inventory: The agent can execute 'gws' CLI commands to modify organization-level vault settings and data. * Sanitization: The skill does not implement specific sanitization or validation of the content returned from the API before it is processed by the agent.
Audit Metadata