gws-sheets-append
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious behavior, obfuscation, or unauthorized data access patterns were identified in the skill definition.- [COMMAND_EXECUTION]: The skill executes the
gwsbinary to interact with Google Sheets. This behavior is expected and aligns with the tool's primary function.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which is then written to a spreadsheet, creating a potential surface for indirect injection. This is a known risk for data-processing tools but is consistent with the skill's intended use. - Ingestion points: Data is accepted via
--valuesand--json-valuesflags inSKILL.md. - Boundary markers: Absent.
- Capability inventory: The skill uses the
gwsbinary to perform write operations to Google Sheets. - Sanitization: Not present; the skill passes raw strings to the CLI tool.
Audit Metadata