recipe-share-doc-and-notify

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the gws command-line utility to perform document management and communication tasks. These commands include gws drive files list to locate documents, gws drive permissions create to grant access, and gws gmail +send to send notifications. The usage of these tools is consistent with the stated purpose of the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill interacts with external data by listing files from Google Drive. While this creates a surface for potential indirect prompt injection (e.g., if a file is named with malicious instructions), the skill's logic is restricted to extracting IDs and does not involve executing content from the files themselves.
  • Ingestion points: gws drive files list (SKILL.md)
  • Boundary markers: Not applicable (parameters are passed as structured JSON or strings)
  • Capability inventory: gws CLI tools for Drive and Gmail (SKILL.md)
  • Sanitization: None detected for file metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:00 PM