gws-gmail
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill enables the agent to read and process external, untrusted data from Gmail which can contain malicious instructions.
- Ingestion points: The skill uses
+triage,+read, and+watchhelper commands to fetch email subjects, bodies, and streaming updates from the Gmail API. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands within the fetched email data are defined in this skill file.
- Capability inventory: The skill possesses extensive write capabilities, including
+send,+reply,+forward, and generic API method execution viagws gmail <resource> <method>, allowing for email creation and modification. - Sanitization: There is no evidence of sanitization, escaping, or validation of the email content before it is processed by the agent.
Audit Metadata