gws-docs
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the 'gws' CLI tool to interact with Google Docs API resources, including retrieving and updating document content.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes content from external Google Docs. 1. Ingestion points: Document content retrieved via 'gws docs documents get' as described in SKILL.md. 2. Boundary markers: No delimiters or isolation markers are defined in this file to separate untrusted content from instructions. 3. Capability inventory: The skill has write capabilities through 'batchUpdate' and 'create' API methods. 4. Sanitization: No explicit sanitization or validation of the document content is specified.
Audit Metadata