recipe-share-doc-and-notify
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
gwscommand-line utility to perform document management and communication tasks. These commands includegws drive files listto locate documents,gws drive permissions createto grant access, andgws gmail +sendto send notifications. The usage of these tools is consistent with the stated purpose of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with external data by listing files from Google Drive. While this creates a surface for potential indirect prompt injection (e.g., if a file is named with malicious instructions), the skill's logic is restricted to extracting IDs and does not involve executing content from the files themselves.
- Ingestion points:
gws drive files list(SKILL.md) - Boundary markers: Not applicable (parameters are passed as structured JSON or strings)
- Capability inventory:
gwsCLI tools for Drive and Gmail (SKILL.md) - Sanitization: None detected for file metadata.
Audit Metadata