recipe-create-events-from-sheet
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from a Google Sheets spreadsheet to create calendar events, which creates a potential surface for indirect prompt injection if the source data contains malicious instructions.
- Ingestion points: Data enters the agent context via the gws sheets +read command in SKILL.md.
- Boundary markers: No delimiters or 'ignore' instructions are present to separate external content from the skill logic.
- Capability inventory: The skill has the capability to perform write operations using the gws calendar +insert tool in SKILL.md.
- Sanitization: No evidence of input validation or content sanitization is provided for the retrieved spreadsheet data.
Audit Metadata