google-workspace-workflow

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly asks the user to provide service account JSON or access tokens and shows shell commands that require pasting those secrets verbatim (e.g., using cat << 'CREDENTIALS' with the JSON and echo 'export ... '), which forces the agent to handle and output secret values directly.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill installs the gws CLI at runtime by executing a remote script fetched via curl and piped to sh (curl ... https://github.com/googleworkspace/cli/releases/latest/download/gws-installer.sh | sh), which downloads and runs remote code the skill relies on.