recipe-create-feedback-form

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands using the gws CLI utility. It specifically uses gws forms forms create to generate a Google Form and gws gmail +send to distribute the form link via email. These operations are restricted to the functionality described in the skill's metadata and are standard for productivity automation.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes template strings (form titles and email bodies) to perform its tasks.
  • Ingestion points: SKILL.md defines static strings for the form title and email body.
  • Boundary markers: None present, as the current implementation uses hardcoded values.
  • Capability inventory: File-based command execution for Google Workspace management.
  • Sanitization: Not applicable for the hardcoded values provided in this recipe.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:00 PM