recipe-plan-weekly-schedule
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from Google Calendar, which is an external source that may contain malicious instructions embedded by third parties.
- Ingestion points: Data is ingested via the output of the
gws calendar +agendacommand. - Boundary markers: No delimiters or specific instructions are provided to help the agent distinguish between calendar data and system instructions.
- Capability inventory: The skill has the capability to write to the calendar using the
gws calendar +insertcommand. - Sanitization: The skill does not perform any sanitization or validation of the calendar content before it is processed by the agent.
Audit Metadata