persona-exec-assistant
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the gws command-line utility for managing emails, calendar events, and drive files. Commands like gws gmail +triage and gws calendar +insert are core to the assistant's workflow.\n- [EXTERNAL_DOWNLOADS]: The skill specifies dependencies on the gws binary and several sub-skills such as gws-gmail and gws-calendar in its metadata. These resources are part of the vendor infrastructure used to provide the assistant's functionality.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted data from emails and meeting descriptions without specific safety instructions for those inputs.\n
- Ingestion points: The agent is instructed to triage emails and read meeting descriptions via gws commands in SKILL.md.\n
- Boundary markers: Absent. No instructions are provided to the agent to isolate or treat external content as untrusted data.\n
- Capability inventory: The agent has the capability to send emails, insert calendar entries, and interact via chat messages.\n
- Sanitization: Absent. The instructions do not define any validation, filtering, or sanitization of the content found in emails or meeting details.
Audit Metadata