gws-classroom
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Google Classroom (courses, announcements, posts), which are external and potentially user-controlled sources. 1. Ingestion points: Data is ingested via 'gws classroom' resource methods such as 'courses.list', 'announcements', and 'posts' as described in SKILL.md. 2. Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the skill to protect against malicious instructions in data. 3. Capability inventory: The skill is configured to use the 'gws' binary as defined in SKILL.md. 4. Sanitization: Absent; there is no evidence of content sanitization or validation for the data retrieved from the Classroom API before it is processed by the agent.
- [COMMAND_EXECUTION]: The skill is designed to execute the 'gws' binary to interact with the Google Classroom API. This is the primary and intended function of the skill.
Audit Metadata