Skip to content
skillsafebeta
← Report library
Purpose / Other

Gws Slides Skill Security Audit

What the author says it does (original text)

Google Slides: Read and write presentations.

Independent security check

Security risks found

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.Risks found: 1
Medium risk

A generator command is required when the shared security guide is missing

Source references: 1
What we found

This is a live prerequisite: when the neighboring shared Skill is absent, the agent is told to run `gws generate-skills`. That command is executed by the external `gws` program and is described as creating the missing file, but the generated paths, contents, and overwrite behavior are not supplied here.

Why this matters

In an environment with write access, the external program may create persistent files in the user's Skill directories. Because neither its implementation nor output is provided, the user cannot confirm the change boundary or review the generated authentication and security rules before execution.

What this evidence establishes

This is an active prerequisite: only if the adjacent shared Skill is missing, the agent is told to run the external `gws generate-skills` command. The text indicates that it creates missing files, so it may write to the local filesystem; however, the provided source does not specify destinations, generated content, or overwrite behavior, so harm to user files cannot be established. A user can ask the author to document the exact write scope and overwrite policy, or allow it only in an isolated directory.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

2 instruction sections

This Skill is a command-line guide for Google Slides. It depends on a locally installed `gws` program and invokes presentation APIs through `gws slides`.

View source
SKILL.md:8In the instructionsOpen original file
    category: "productivity"    requires:      bins:        - gws    cliHelp: "gws slides --help"---
SKILL.md:18In the instructionsOpen original file
```bashgws slides <resource> <method> [flags]```

The documented functions include reading the latest presentation as well as creating blank presentations and applying batch changes; a batch is applied only after all requests validate.

View source
SKILL.md:26In the instructionsOpen original file
  - `batchUpdate` — Applies one or more updates to the presentation. Each request is validated before being applied. If any request is not valid, then the entire request will fail and nothing will be applied. Some requests have replies to give you some information about how they are applied. Other requests do not need to return information; these each return an empty reply. The order of replies matches that of the requests.  - `create` — Creates a blank presentation using the title given in the request. If a `presentationId` is provided, it is used as the ID of the new presentation. Otherwise, a new ID is generated. Other fields in the request, including any provided content, are ignored. Returns the created presentation.  - `get` — Gets the latest version of the specified presentation.  - `pages` — Operations on the 'pages' resource

Before invoking an API, the Skill instructs the agent to inspect command help and the method schema, then construct parameter and JSON arguments from that output.

View source
SKILL.md:31In the instructionsOpen original file
## Discovering CommandsBefore calling any API method, inspect it:```bash# Browse resources and methodsgws slides --help# Inspect a method's required params, types, and defaultsgws schema slides.<resource>.<method>```Use `gws schema` output to build your `--params` and `--json` flags.

Authentication, global flags, and security rules are delegated to a neighboring shared Skill that is absent from the supplied source, so its credential handling and permission scope cannot be reviewed from this material.

View source
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Start here · InstructionsSKILL.md
gws-slides
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:18In the instructionsOpen original file
```bashgws slides <resource> <method> [flags]
SKILL.md:35In the instructionsOpen original file
```bash# Browse resources and methods
Connect to websites
SKILL.md:26In the instructionsOpen original file
  - `batchUpdate` — Applies one or more updates to the presentation. Each request is validated before being applied. If any request is not valid, then the entire request will fail and nothing will be applied. Some requests have replies to give you some information about how they are applied. Other requests do not need to return information; these each return an empty reply. The order of replies matches that of the requests.  - `create` — Creates a blank presentation using the title given in the request. If a `presentationId` is provided, it is used as the ID of the new presentation. Otherwise, a new ID is generated. Other fields in the request, including any  …
Lines read
45
File checksum (to compare versions)
89ff0847a7e9daf23f64685e70dd614382723ff461fc80f5c7a8d814bbe7a5a9