gws-classroom

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Google Classroom (courses, announcements, posts), which are external and potentially user-controlled sources. 1. Ingestion points: Data is ingested via 'gws classroom' resource methods such as 'courses.list', 'announcements', and 'posts' as described in SKILL.md. 2. Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the skill to protect against malicious instructions in data. 3. Capability inventory: The skill is configured to use the 'gws' binary as defined in SKILL.md. 4. Sanitization: Absent; there is no evidence of content sanitization or validation for the data retrieved from the Classroom API before it is processed by the agent.
  • [COMMAND_EXECUTION]: The skill is designed to execute the 'gws' binary to interact with the Google Classroom API. This is the primary and intended function of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 12:30 PM