recipe-share-event-materials
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes attendee information from external Google Calendar events to automate file sharing on Google Drive.
- Ingestion points: Attendee email addresses are retrieved from the output of
gws calendar events get(SKILL.md, Step 1). - Boundary markers: The instructions do not define specific delimiters or validation rules for the data retrieved from the calendar event before it is used in subsequent commands.
- Capability inventory: The skill utilizes
gws drive permissions create(SKILL.md, Step 2) to modify file access, which is a write-capable operation. - Sanitization: There are no explicit instructions for the agent to sanitize or validate the email strings or attendee data before passing them to the sharing command.
Audit Metadata