Skip to content
skillsafebeta
← Report library
Purpose / Other

Gws Docs Skill Security Audit

What the author says it does (original text)

Read and write Google Docs.

Independent security check

Security risks found

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.Risks found: 1
Medium risk

A generator is executed to create local files when the safety prerequisite is missing

Source references: 1
What we found

The Skill explicitly directs the agent to run `gws generate-skills` when the shared Skill file is absent. The supplied source does not identify the generator's write paths, overwrite behavior, or whether generated content introduces further instructions.

Why this matters

Execution may persistently create or update local Skill files and cause later agents to follow authentication or safety instructions outside this audit's scope. The evidence does not establish whether existing files can be overwritten.

This is an active conditional instruction: if the shared prerequisite is missing, the Skill directs the agent to run a generator to “create it.” Using the Skill may therefore write local files. The provided source does not identify the output paths, overwrite behavior, or generated content, so it does not establish that overwriting or malicious instruction injection occurs. A user can ask the author to document generated files and overwrite policy, and first inspect the command under read-only restrictions.

SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

3 instruction sections

This Skill documents a Google Docs command-line interface with methods to read a document, create a blank document, and apply batches of document changes. A batch is validated as a whole and is not applied if any request is invalid.

View source
SKILL.md:32In the instructionsOpen original file
  - `batchUpdate` — Applies one or more updates to the document. Each request is validated before being applied. If any request is not valid, then the entire request will fail and nothing will be applied. Some requests have replies to give you some information about how they are applied. Other requests do not need to return information; these each return an empty reply. The order of replies matches that of the requests.  - `create` — Creates a blank document using the title given in the request. Other fields in the request, including any provided content, are ignored. Returns the created document.  - `get` — Gets the latest version of the specified document.

Before an API call, the Skill directs the agent to inspect command help and the method schema, then construct parameters and JSON from that output. This helps identify API requirements but does not define how the target document should be selected or verified.

View source
SKILL.md:38In the instructionsOpen original file
Before calling any API method, inspect it:```bash# Browse resources and methodsgws docs --help# Inspect a method's required params, types, and defaultsgws schema docs.<resource>.<method>```Use `gws schema` output to build your `--params` and `--json` flags.

Authentication, global flags, and security rules are delegated to a neighboring shared Skill rather than defined in the supplied source. The provided material therefore does not allow verification of token scope, account selection, or safety restrictions.

View source
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Start here · InstructionsSKILL.md
gws-docs
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:18In the instructionsOpen original file
```bashgws docs <resource> <method> [flags]
SKILL.md:40In the instructionsOpen original file
```bash# Browse resources and methods
Connect to websites
SKILL.md:32In the instructionsOpen original file
  - `batchUpdate` — Applies one or more updates to the document. Each request is validated before being applied. If any request is not valid, then the entire request will fail and nothing will be applied. Some requests have replies to give you some information about how they are applied. Other requests do not need to return information; these each return an empty reply. The order of replies matches that of the requests.  - `create` — Creates a blank document using the title given in the request. Other fields in the request, including any provided content, are ignored. Returns the created document.
Lines read
50
File checksum (to compare versions)
5c3f4d854af7d428f681d7c2d3f37da99d859b932acd85f73c55d2fda6526615