gws-workflow-file-announce
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for a CLI tool to announce Google Drive files in Google Chat. All identified operations are consistent with the skill's stated purpose, and no malicious patterns or security risks were found.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted data through command-line arguments.
- Ingestion points: Flags such as --file-id, --space, and --message in SKILL.md.
- Boundary markers: None explicitly defined in the prompt templates.
- Capability inventory: Execution of the gws CLI tool for messaging and file metadata retrieval.
- Sanitization: Input validation and sanitization are assumed to be implemented within the gws binary.
Audit Metadata