Skip to content
skillsafebeta
← Report library
Purpose / Other

Gws Workflow Skill Security Audit

What the author says it does (original text)

Google Workflow: Cross-service productivity workflows.

Independent security check

Security risks found

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.Risks found: 1
Medium risk

A missing security-rules file triggers an underspecified file-generation command

Source references: 1
What we found

When the shared Skill is missing, this Skill directs the agent to run `gws generate-skills`, without stating which files it creates or overwrites and without requiring a change preview.

Why this matters

If an agent automatically follows the prerequisite, the command may make lasting changes to local Skill or configuration directories. The supplied material does not establish the generated content or overwrite behavior.

What this evidence establishes

The instruction does tell the agent to run `gws generate-skills` when the shared Skill is missing, which may write files. However, the supplied source does not describe its output paths, scope, or overwrite behavior, so a risk to user files cannot be confirmed. A user can ask the author to document the exact files and overwrite rules, and restrict execution to an isolated directory or require a change preview.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

2 instruction sections

This Skill is a command index for cross-service Google Workspace workflows. It requires the local `gws` executable and provides a generic resource, method, and flags invocation form.

View source
SKILL.md:2In the instructionsOpen original file
---name: gws-workflowdescription: "Google Workflow: Cross-service productivity workflows."metadata:  version: 0.22.5  openclaw:    category: "productivity"    requires:      bins:        - gws    cliHelp: "gws workflow --help"
SKILL.md:18In the instructionsOpen original file
```bashgws workflow <resource> <method> [flags]```

This file does not contain its authentication and security rules; it directs the agent to a neighboring shared Skill. That file is absent from the supplied evidence, so its credential handling and permission boundaries cannot be verified here.

View source
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.

The listed helpers concern reading meeting, task, and email information, creating tasks, and announcing Drive files in Chat spaces. This file only links to other Skills and does not show their concrete commands or confirmation steps.

View source
SKILL.md:26In the instructionsOpen original file
|---------|-------------|| [`+standup-report`](../gws-workflow-standup-report/SKILL.md) | Today's meetings + open tasks as a standup summary || [`+meeting-prep`](../gws-workflow-meeting-prep/SKILL.md) | Prepare for your next meeting: agenda, attendees, and linked docs || [`+email-to-task`](../gws-workflow-email-to-task/SKILL.md) | Convert a Gmail message into a Google Tasks entry || [`+weekly-digest`](../gws-workflow-weekly-digest/SKILL.md) | Weekly summary: this week's meetings + unread email count || [`+file-announce`](../gws-workflow-file-announce/SKILL.md) | Announce a Drive file in a Chat space |
Start here · InstructionsSKILL.md
gws-workflow
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:18In the instructionsOpen original file
```bashgws workflow <resource> <method> [flags]
SKILL.md:36In the instructionsOpen original file
```bash# Browse resources and methods
Lines read
46
File checksum (to compare versions)
4032b935166504e30f8d1b6eb5d343a4d8766d0881ab431a8ce456bea8816fe2