gws-admin-reports
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
gwscommand-line utility to query the Google Workspace Admin SDK for activities, usage reports, and channel management. - [EXTERNAL_DOWNLOADS]: Refers to the official Google Workspace CLI repository on GitHub for supplemental documentation and source code verification.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface because it processes audit logs which may contain untrusted strings generated by user actions.
- Ingestion points: Administrative activity logs and usage reports retrieved via the
gws admin-reportsresource methods defined inSKILL.md. - Boundary markers: Absent; the instructions do not define specific markers or delimiters to isolate processed log data.
- Capability inventory: Shell command execution capability via the
gwsbinary requirement. - Sanitization: Absent; the skill does not define specific validation or filtering logic for the data retrieved from the API.
Audit Metadata