gws-forms
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
gwsbinary to execute commands for managing Google Forms resources, includingbatchUpdate,create,get,setPublishSettings,responses, andwatchesas documented inSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Google Forms which could contain malicious instructions designed to influence the agent.
- Ingestion points: External data is ingested via the
gws forms getandgws forms responsescommands. - Boundary markers: The instructions do not specify any delimiters or safety markers to differentiate between data and instructions when reading form content.
- Capability inventory: The skill's capabilities are limited to Google Forms API operations via the
gwsCLI tool. - Sanitization: There is no mention of sanitization, filtering, or validation of the content retrieved from form titles, descriptions, or response data.
Audit Metadata