gws-events
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions define usage of the
gwscommand-line utility for interacting with API resources such as messages, operations, and subscriptions. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to handle external data from Google Workspace events, creating a potential vector for indirect instructions.
- Ingestion points: Data from Google Workspace event streams is ingested via methods like
stream,get, andlistinSKILL.md. - Boundary markers: No explicit markers or delimiters are provided in the instructions to separate untrusted external data from the agent's core logic.
- Capability inventory: The skill allows execution of shell commands through the
gwsbinary as documented inSKILL.md. - Sanitization: The instructions do not specify any validation or sanitization routines for the external data being processed.
Audit Metadata