gws-calendar-agenda
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the 'gws' binary to retrieve calendar data. This is a local command execution required for the skill's primary function.
- [PROMPT_INJECTION]: The skill processes untrusted data from Google Calendar events, which is a surface for indirect prompt injection. 1. Ingestion points: Data enters the agent context through the output of 'gws calendar +agenda' (SKILL.md). 2. Boundary markers: None identified in instructions. 3. Capability inventory: Uses the 'gws' CLI tool for read-only calendar operations. 4. Sanitization: No explicit sanitization of calendar content is described.
Audit Metadata