recipe-share-folder-with-team

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions to execute shell commands using the gws tool to interact with Google Drive API functions for file listing and permission management.
  • [PROMPT_INJECTION]: The skill defines a surface for indirect prompt injection by demonstrating how to interpolate user-provided values, such as folder names and email addresses, into shell command templates. • Ingestion points: User-provided strings for folder names and collaborator email addresses in SKILL.md. • Boundary markers: None provided to delimit user input within the command strings. • Capability inventory: Shell command execution via the gws binary with capabilities to modify file permissions. • Sanitization: No explicit instructions for sanitizing or escaping user input before interpolation into command strings.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 01:28 PM
Security Audit — agent-trust-hub — recipe-share-folder-with-team