recipe-share-folder-with-team
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to execute shell commands using the
gwstool to interact with Google Drive API functions for file listing and permission management. - [PROMPT_INJECTION]: The skill defines a surface for indirect prompt injection by demonstrating how to interpolate user-provided values, such as folder names and email addresses, into shell command templates. • Ingestion points: User-provided strings for folder names and collaborator email addresses in
SKILL.md. • Boundary markers: None provided to delimit user input within the command strings. • Capability inventory: Shell command execution via thegwsbinary with capabilities to modify file permissions. • Sanitization: No explicit instructions for sanitizing or escaping user input before interpolation into command strings.
Audit Metadata