google-workspace-ops
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process content from external Google Docs, Sheets, and Slides, which serves as a potential vector for indirect prompt injection.
- Ingestion points: The agent reads content from various Google Workspace file types identified via Drive search.
- Boundary markers: The instructions do not provide delimiters or warnings to the agent to treat document content as untrusted data or to ignore instructions found within them.
- Capability inventory: The skill permits the agent to summarize, modify, migrate, and clean up files, providing a surface for injected instructions to affect user data.
- Sanitization: There are no requirements or methods specified for sanitizing the text or data extracted from the documents before processing or execution.
- [NO_CODE]: The skill consists entirely of Markdown instructions and metadata; it does not contain any scripts, binary files, or other executable code.
Audit Metadata