recipe-create-feedback-form
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
gwsbinary, a command-line interface for Google Workspace, to create forms and send emails. This is listed in the skill's required binaries and aligns with its stated purpose. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface. Ingestion points: It reads the
responderUrifrom the output of the form creation command. Boundary markers: No specific delimiters or instructions are used to isolate this variable in the subsequent email command. Capability inventory: The skill has access to email sending capabilities (gws gmail +send). Sanitization: No validation is performed on the tool-provided URL before it is used.
Audit Metadata