Security audit
Security checks for vulnerabilities and agentic risk
This executive-assistant skill is coherent, but it can send email from the user's workspace without clearly requiring approval first.
Review this skill before installing in a real executive workspace. It is suitable only if the agent is allowed to read Google Workspace data, and it should be amended or used with a strict approval rule before any email is sent.
The manifest description says "Manage an executive's schedule, inbox, and communications," which is a very broad natural-language capability statement that overlaps with common assistant requests. The file does not provide explicit trigger phrases, exclusions, or scope limits that would help prevent unintended invocation.
The skill instructs the agent to draft replies with gws gmail +send, which implies external communication, but it does not require explicit user confirmation or a warning before sending. In an executive-assistant context, this is more dangerous because messages may be sent to leadership, direct reports, or external contacts, increasing the risk of unauthorized or mistaken communications with reputational or operational impact.
No suspicious patterns detected.
