OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass5 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
This skill allows the agent to append text to Google Documents using the 'gws' CLI tool. It is a legitimate utility from the vendor, but it presents a potential attack surface for indirect prompt injection and command execution because it handles user-provided document IDs and text content without explicit validation or sanitization steps.
Detected behaviors
No alerts
No issues
1 file scanned · No issues
Score: 93/100 · 2 sections analyzed