recipe-email-drive-link
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
gws(Google Workspace) command-line utility to perform file listing, permission management, and email operations. These commands are consistent with the skill's stated purpose and the provided vendor context. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data by listing files from Google Drive and using those results (specifically the
FILE_ID) in subsequent actions like granting permissions and sending emails. - Ingestion points:
gws drive files listoutput from the user's Google Drive environment (SKILL.md). - Boundary markers: None present in the recipe steps.
- Capability inventory: File permission modification (
gws drive permissions create) and email sending (gws gmail +send) (SKILL.md). - Sanitization: None explicitly defined; the skill relies on the agent to correctly interpolate the
FILE_IDfrom search results into the template.
Audit Metadata