gws-script
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the 'gws' command-line interface to interact with Google Apps Script APIs. This is expected behavior for a tool designed to manage Google Workspace resources by a verified vendor.
- [INDIRECT_PROMPT_INJECTION]: The skill exposes an attack surface by ingesting external project content into the agent's context.
- Ingestion points: Data retrieved via API methods such as
getContentandlistScriptProcessesas described inSKILL.md. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are defined for processing external script content.
- Capability inventory: Execution of shell commands via the
gwsbinary as listed inSKILL.md. - Sanitization: The skill does not specify any sanitization or validation of the retrieved content before it is processed by the agent.
Audit Metadata