gws-drive-upload
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a command-line tool named
gwsto perform file operations. This is the intended behavior for this productivity utility. - [DATA_EXFILTRATION]: The skill's primary purpose is to upload local files to an external service (Google Drive). While this involves data leaving the local environment, it is the documented and expected behavior of the tool.
- [INDIRECT_PROMPT_INJECTION]: The skill handles file paths and names which could be influenced by untrusted data. However, the skill explicitly includes a security caution requiring the agent to confirm the action with the user before execution, which serves as a mitigation for accidental or malicious file uploads.
Audit Metadata