recipe-find-free-time
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from calendar queries and has the ability to perform write operations, creating an indirect prompt injection surface.
- Ingestion points: The skill reads output from the
gws calendar freebusy querycommand described in SKILL.md. - Boundary markers: No delimiters or instructions are used to separate external data from the agent's instructions.
- Capability inventory: The skill uses the
gwsCLI to insert new calendar events (gws calendar +insert) as specified in SKILL.md. - Sanitization: No sanitization or validation of the retrieved calendar data is performed before the agent processes it.
Audit Metadata