gws-admin-reports

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the gws command-line utility to query the Google Workspace Admin SDK for activities, usage reports, and channel management.
  • [EXTERNAL_DOWNLOADS]: Refers to the official Google Workspace CLI repository on GitHub for supplemental documentation and source code verification.
  • [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface because it processes audit logs which may contain untrusted strings generated by user actions.
  • Ingestion points: Administrative activity logs and usage reports retrieved via the gws admin-reports resource methods defined in SKILL.md.
  • Boundary markers: Absent; the instructions do not define specific markers or delimiters to isolate processed log data.
  • Capability inventory: Shell command execution capability via the gws binary requirement.
  • Sanitization: Absent; the skill does not define specific validation or filtering logic for the data retrieved from the API.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 10:49 PM
Security Audit — agent-trust-hub — gws-admin-reports