skills/jetbrains/skills/gws-keep/Gen Agent Trust Hub

gws-keep

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the gws command-line utility to interact with the Google Keep API for creating, deleting, and listing notes.
  • [EXTERNAL_DOWNLOADS]: The media download command fetches attachments from Google Keep. The skill's source and its dependent resources originate from the googleworkspace organization on GitHub, which is a recognized and trusted source.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from Google Keep notes and attachments, which represents a potential attack surface for indirect prompt injection if note content contains malicious instructions.
  • Ingestion points: Note text and metadata retrieved via notes get or notes list (SKILL.md), and file content from media download (SKILL.md).
  • Boundary markers: None explicitly defined in the provided instruction set.
  • Capability inventory: Execution of gws CLI commands for API interactions (SKILL.md).
  • Sanitization: The skill does not describe specific sanitization or escaping protocols for the content retrieved from notes.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 04:24 PM