recipe-save-email-to-doc
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
gwscommand-line utility to fetch email data and manage Google Docs. - [DATA_EXFILTRATION]: The skill facilitates the transfer of message content from Gmail to Google Docs. This is the primary intended function and occurs within the user's trusted workspace environment.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from email messages, which creates a potential surface for indirect prompt injection. (1) Ingestion points: Email bodies are retrieved via the
gws gmail users messages getcommand. (2) Boundary markers: No delimiters are used to wrap the untrusted email body within the command string. (3) Capability inventory: The skill has the capability to create and write to Google Docs via thegwstool. (4) Sanitization: There is no evidence of sanitization or validation of the email content before it is processed.
Audit Metadata