gws-gmail-send
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a well-defined wrapper for the gws CLI to send emails. It does not exhibit malicious patterns such as obfuscation, credential theft, or unauthorized persistence.
- [PROMPT_INJECTION]: The skill facilitates a write operation (sending emails) where content is provided via command-line arguments. While this creates a surface for indirect prompt injection, the skill mitigates risk by instructing the agent to confirm with the user before execution.
- Ingestion points: Recipient, subject, and body fields defined in SKILL.md.
- Boundary markers: Absent.
- Capability inventory: Uses the gws binary for network-based email transmission.
- Sanitization: Not specified in the skill definition.
Audit Metadata