recipe-share-folder-with-team
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
gwscommand-line tool to interact with the Google Drive API. These commands are used to find folders and update access permissions for specific collaborators, which is the primary intended function of the skill. - [PROMPT_INJECTION]: The skill reads file and folder metadata from an external source (Google Drive) via the
gws drive files listcommand. This establishes a surface for indirect prompt injection (Category 8c), though the skill does not currently demonstrate any unsafe interpolation of this data into instructions.
Audit Metadata