recipe-share-folder-with-team

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the gws command-line tool to interact with the Google Drive API. These commands are used to find folders and update access permissions for specific collaborators, which is the primary intended function of the skill.
  • [PROMPT_INJECTION]: The skill reads file and folder metadata from an external source (Google Drive) via the gws drive files list command. This establishes a surface for indirect prompt injection (Category 8c), though the skill does not currently demonstrate any unsafe interpolation of this data into instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 02:24 AM