gws-forms
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes a vendor-provided CLI tool ('gws') to interact with Google Workspace APIs. This is consistent with the stated purpose of the skill and the author's identity.
- [SAFE]: No evidence of prompt injection, data exfiltration, or credential harvesting was found. The instructions focus on legitimate API resources like forms, responses, and watches.
- [SAFE]: The reliance on an external binary ('gws') is explicitly declared in the YAML metadata under the 'requires' field, following best practices for environment configuration.
- [SAFE]: The skill mentions a prerequisite configuration file ('../gws-shared/SKILL.md') for handling authentication and security rules, indicating a structured and security-conscious design.
Audit Metadata