recipe-sync-contacts-to-sheet
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from the Google Contacts directory which is externally controllable.\n- Ingestion points: Directory data is listed via
gws people people listDirectoryPeoplein SKILL.md.\n- Boundary markers: No explicit instructions to the AI to ignore instructions within the data are present.\n- Capability inventory: The skill possesses the ability to append data to Google Sheets.\n- Sanitization: The skill relies on structured JSON formatting but does not implement content-level sanitization for the contact fields.\n- [COMMAND_EXECUTION]: The skill executesgws(Google Workspace CLI) commands to interact with Contacts and Sheets APIs. This is the intended functionality for this recipe.
Audit Metadata