recipe-watch-drive-changes
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the monitoring of changes to external Google Drive files, which introduces a potential surface for indirect prompt injection via the ingested data.\n
- Ingestion points: Google Drive file updates via
drive.googleapis.comas described inSKILL.md.\n - Boundary markers: There are no specific instructions or delimiters provided to ensure the agent ignores or sanitizes instructions embedded in the external content.\n
- Capability inventory: The skill utilizes the
gwsbinary to manage event subscriptions.\n - Sanitization: No sanitization mechanisms are described for the content received from the notification payload.
Audit Metadata