recipe-create-expense-tracker
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Google Workspace CLI commands to perform file and data operations. The commands include:
gws drive files createfor creating a new spreadsheet in Google Drive.gws sheets +appendfor adding header rows and initial data entries to a specific sheet.gws drive permissions createfor sharing the created spreadsheet with a designated email address.- [INDIRECT_PROMPT_INJECTION]: The skill acts as a template or recipe that processes commands involving user-specific data (like spreadsheet IDs).
- Ingestion points: Data enters the context through command arguments and JSON payloads within the
SKILL.mdsteps. - Boundary markers: No specific delimiters or safety instructions are defined to separate recipe steps from the data they process.
- Capability inventory: The skill utilizes tools for file creation, metadata modification, and data writing within a cloud storage environment.
- Sanitization: The skill does not explicitly sanitize the inputs, relying on the platform's execution environment and the
gwstool's own validation.
Audit Metadata