persona-sales-ops
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data from client emails and shared spreadsheets, creating a potential vector for indirect instructions to influence the agent.
- Ingestion points: Untrusted content enters the agent's context through the
gws-gmailandgws-sheetssub-skills. - Boundary markers: The skill lacks explicit instructions or delimiters to isolate and ignore potentially malicious instructions embedded within emails or sheet data.
- Capability inventory: The skill possesses broad capabilities across the Google Workspace suite, including file uploads to Drive, data modification in Sheets, and email management.
- Sanitization: There are no defined sanitization or validation steps for the content retrieved from external sources.
Audit Metadata