gws-slides
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the execution of the
gwsbinary to perform its tasks. The instructions direct the agent to usegws slidescommands to interact with resources like presentations and pages. This is the intended primary functionality of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill has the capability to read untrusted data from external sources (Google Slides presentations) using the
getmethod. This data could contain malicious instructions that the agent might inadvertently follow. - Ingestion points: The
gws slides presentations getcommand retrieves presentation content which is then processed by the agent. - Boundary markers: There are no explicit boundary markers or delimiters defined in this file to separate external presentation content from the agent's core instructions.
- Capability inventory: The skill has permissions to read, create, and update presentations through the
gwsCLI. - Sanitization: The instructions do not specify any validation, filtering, or sanitization of the content retrieved from presentations.
Audit Metadata