gws-gmail-forward
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
gwscommand-line utility to forward emails, which is its primary intended function. The command structure and flags align with typical administrative email operations. - [INDIRECT_PROMPT_INJECTION]: The skill includes an attack surface for indirect prompt injection because it processes email content and user-defined body text without explicit boundaries.
- Ingestion points: The
--message-idand--bodyparameters inSKILL.md. - Boundary markers: The skill does not define specific delimiters to separate data from instructions.
- Capability inventory: The skill executes shell commands via the
gwsbinary. - Sanitization: No sanitization or filtering of the interpolated input is specified in the skill file.
Audit Metadata