gws-workflow-file-announce

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides instructions for a CLI tool to announce Google Drive files in Google Chat. All identified operations are consistent with the skill's stated purpose, and no malicious patterns or security risks were found.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted data through command-line arguments.
  • Ingestion points: Flags such as --file-id, --space, and --message in SKILL.md.
  • Boundary markers: None explicitly defined in the prompt templates.
  • Capability inventory: Execution of the gws CLI tool for messaging and file metadata retrieval.
  • Sanitization: Input validation and sanitization are assumed to be implemented within the gws binary.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 12:25 PM