Security audit
Gws Workflow File Announce
Security checks across malware telemetry and agentic risk
Overview
This skill is a narrow Google Workspace helper that announces a chosen Drive file in a chosen Chat space, with the main risk being the intended Chat post.
Install only if you trust the gws CLI and the shared gws auth instructions. Before running the command, verify the Drive file ID, Chat space, optional message, and active Google Workspace account because it will send a real message to that space.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.