gws-calendar
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
gwscommand-line utility to interact with the Google Calendar API. This is the intended primary function and follows standard CLI patterns. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes data from external sources (Google Calendar events, descriptions, and metadata).
- Ingestion points: Data returned from Google Calendar API methods such as
events.list,calendars.get, andsettings.list. - Boundary markers: No specific delimiters or safety warnings are implemented in the instruction set to separate data from instructions.
- Capability inventory: The skill allows creating, updating, and deleting calendar events and access control rules via
gwsCLI calls. - Sanitization: No explicit sanitization or verification of data received from the API is present.
Audit Metadata