Security audit

Work Productivity Gog Google Workflow Helper

Security checks for vulnerabilities and agentic risk

Overview

This is a plain workflow-helper skill with overly broad activation wording, but it contains no hidden execution, credential access, persistence, or destructive behavior.

Install only if you want a general Gog/Google-workflow productivity helper. Be aware it may activate too broadly on common Google Workspace or CLI wording, so explicit skill invocation or narrowed triggers would make use clearer.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (12)

Vague Triggers

High

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The skill description is scoped with very broad terms like 'google', 'workspace', 'cli', and generic requests for 'practical workflow, artifact, checklist, analysis, or implementation support.' This can cause unintended invocation on ordinary user requests, leading the agent to load irrelevant instructions or capabilities and increasing the attack surface for prompt-routing mistakes or privilege misuse.
Content: No source excerpt is available for this finding.

Vague Triggers

High

Category: Not specified by scanner
Confidence: 99% confidence
Finding: The keyword list contains highly ambiguous, common words such as 'google', 'workspace', 'cli', 'gmail', 'calendar', and 'drive' without constraints. In systems that auto-select skills from keyword matches, this can cause frequent accidental activation, misrouting, and unintended exposure of the skill's instructions in contexts unrelated to the intended workflow.
Content: No source excerpt is available for this finding.

Vague Triggers

High

Category: Not specified by scanner
Confidence: 98% confidence
Finding: The trigger sentences are broad, natural-language phrases that could match ordinary user requests unrelated to this specific skill, causing unintended invocation. In an agent ecosystem, overbroad routing can expose users to the wrong workflow, create confusing autonomous behavior, and increase the chance that a skill handles data or tasks outside its intended scope.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The trigger sentences are broad, repetitive, and match generic productivity or workflow requests, which increases the chance the skill will be invoked in contexts the user did not specifically intend. Because this skill appears to cover bug fixing, setup hardening, and adjacent workflow support across Google Workspace and CLI-style tasks, accidental invocation could cause the agent to apply the wrong workflow or expose the user to unnecessary operational actions.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger phrases are broad enough to match common requests involving work productivity, Google Workspace, CLI, or bug fixing, which can cause this skill to activate in contexts the user did not intend. In an agent ecosystem, overbroad activation can route unrelated tasks into a workflow that may shape outputs, request unnecessary context, or interfere with safer or more appropriate skills.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The example trigger phrases are generic and conversational, so they do not establish safe invocation boundaries. This makes it easier for normal user language to accidentally resemble an invocation request, which can result in unreliable routing and overbroad skill application.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 83% confidence
Finding: The skill content is entirely in Chinese and does not provide a user-language choice or opt-in mechanism, which can impair user understanding and informed consent when the surrounding environment is multilingual. In practice, this may lead to misinterpretation of instructions, accidental acceptance of unsuitable workflows, or reduced ability to detect mistakes.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 92% confidence
Finding: The description defines activation conditions in a very broad, ambiguous way, covering generic needs such as 'practical workflow, artifact, checklist, analysis, or implementation support' for common productivity domains. Ambiguous enablement boundaries can cause accidental invocation and overreach, where the agent applies this skill outside its intended scope.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger keywords are overly broad and include common terms like 'google', 'workspace', and 'cli', which can cause the skill to activate for many unrelated requests. This creates prompt-routing risk: users may be steered into this skill unexpectedly, increasing the chance of irrelevant actions, confusion, or unsafe workflow application in the wrong context.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 94% confidence
Finding: The skill enables implicit invocation with no visible activation constraints, which can cause it to trigger in contexts broader than the user likely intended. Because this skill is generic and aligned to common productivity terms like work-productivity, Google, workspace, CLI, checklist, and implementation support, over-broad routing increases the chance of unintended activation, prompt hijacking exposure, or unsafe cross-context assistance.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The keyword list includes very generic terms like 'work-productivity,' 'google,' 'workspace,' and 'bug fix,' which are likely to overlap with many unrelated requests. This can make the skill trigger too often, reducing routing precision and potentially causing the agent to apply this skill in contexts where its assumptions, prompts, or outputs are inappropriate.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 85% confidence
Finding: The file labels documentation variants as English and Chinese editions, and the current file is explicitly a Chinese-language README, but it does not state that language selection is optional or user-driven. This can indicate a locale preference without explicit user opt-in or justification.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.