gws-sheets
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill acts as a data ingestion surface for indirect prompt injection by reading content from external spreadsheets.
- Ingestion points: Data retrieved from spreadsheets using methods such as
spreadsheets.get,getByDataFilter, andvalues.getvia thegwscommand-line utility. - Boundary markers: The skill documentation does not specify the use of delimiters or instructions to the agent to ignore potentially malicious embedded commands in the retrieved data.
- Capability inventory: The skill allows for comprehensive spreadsheet management including creating sheets, reading values, and performing batch updates using the
gwsbinary. - Sanitization: No sanitization or validation processes are mentioned for the content ingested from the spreadsheets.
Audit Metadata