gws-keep
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
gwscommand-line utility to interact with the Google Keep API for creating, deleting, and listing notes. - [EXTERNAL_DOWNLOADS]: The
media downloadcommand fetches attachments from Google Keep. The skill's source and its dependent resources originate from thegoogleworkspaceorganization on GitHub, which is a recognized and trusted source. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from Google Keep notes and attachments, which represents a potential attack surface for indirect prompt injection if note content contains malicious instructions.
- Ingestion points: Note text and metadata retrieved via
notes getornotes list(SKILL.md), and file content frommedia download(SKILL.md). - Boundary markers: None explicitly defined in the provided instruction set.
- Capability inventory: Execution of
gwsCLI commands for API interactions (SKILL.md). - Sanitization: The skill does not describe specific sanitization or escaping protocols for the content retrieved from notes.
Audit Metadata