gws-meeting-scheduler
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
gwsCLI to interact with Google Calendar. These operations (listing events, querying free/busy status, and inserting events) are the primary purpose of the skill and align with the user's intent to manage their calendar. - [DATA_EXPOSURE]: The skill accesses calendar data (event lists, free/busy intervals, and attendee emails) to facilitate meeting scheduling. This data is processed locally by the agent to determine availability and is not exfiltrated to unauthorized external services.
- [PRIVILEGE_ESCALATION]: No attempts to escalate privileges or perform unauthorized system modifications were detected. The commands are scoped to the
gwsCLI functionality. - [REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts or packages.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes external data (calendar event titles and attendee names), it does so within a structured workflow for scheduling. There are no high-privilege capabilities or unsafe interpolation patterns that would enable an indirect injection attack.
Audit Metadata