recipe-bulk-download-folder
Warn
Audited by Snyk on Mar 4, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.70). The SKILL.md workflow (steps 1–3) uses the gws-drive commands to list and download files from a Google Drive folder, which clearly ingests arbitrary user-generated third-party files from Drive that could contain instructions capable of influencing subsequent actions.
Audit Metadata