recipe-backup-sheet-as-csv
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and export data from Google Sheets, which is a source of untrusted external data.
- Ingestion points: Spreadsheet data retrieved via
gws sheets spreadsheets get,gws drive files export, andgws sheets +read(SKILL.md). - Boundary markers: The instructions do not define delimiters or provide warnings to the agent to ignore instructions embedded within the spreadsheet data.
- Capability inventory: The skill has the ability to read external data and output it to the user's environment or console.
- Sanitization: There is no evidence of input validation or content filtering before the agent processes or displays the spreadsheet data.
Audit Metadata