Skip to content
skillsafebeta
← Report library
Purpose / Other

Gws Workflow File Announce Skill Security Audit

What the author says it does (original text)

Google Workflow: Announce a Drive file in a Chat space.

Independent security check

Security risks found

Files checked
1
Risks found
2
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 2
Medium risk

Drive file names and custom text are disclosed to the target Chat space

Source references: 4
What we found

The command reads the Drive file name, constructs an announcement, and sends it to a caller-supplied space. The provided material shows no member check or content preview before sending.

Why this matters

If the space is wrong, has an overly broad membership, or the file name or custom message is sensitive, its members will receive that information. The action also leaves a persistent message under the caller's account.

The workflow fetches the Drive filename and sends an announcement to the caller-selected Chat space; an optional custom message is also part of that announcement. If the space identifier is wrong or its membership is broader than intended, the filename and message text could be disclosed. The provided material shows no membership check or pre-send preview. Users can ask for recipient confirmation and message preview, and restrict allowed spaces.

SKILL.md:30In the instructionsOpen original file
|------|----------|---------|-------------|| `--file-id` | ✓ | — | Drive file ID to announce || `--space` | ✓ | — | Chat space name (e.g. spaces/SPACE_ID) || `--message` | — | — | Custom announcement message || `--format` | — | — | Output format: json (default), table, yaml, csv |
Show 3 other places
SKILL.md:44In the instructionsOpen original file
- This is a write command — sends a Chat message.- Use `gws drive +upload` first to upload the file, then announce it here.- Fetches the file name from Drive to build the announcement.
SKILL.md:23In the instructionsOpen original file
```bashgws workflow +file-announce --file-id <ID> --space <SPACE>```
SKILL.md:32In the instructionsOpen original file
| `--space` | ✓ | — | Chat space name (e.g. spaces/SPACE_ID) || `--message` | — | — | Custom announcement message || `--format` | — | — | Output format: json (default), table, yaml, csv |
Medium risk

The upload tip may create an additional cloud copy of a local file

Source references: 3
What we found

The stated purpose is to announce a Drive file, but the tip recommends running a separate upload command first. Uploading transfers local file contents to cloud storage, an independent data action beyond announcing an existing file.

Why this matters

If an agent treats the tip as a default step, a local file not authorized for upload could be stored in Google Drive and become subject to that account's sharing, retention, and administrator policies.

Legitimate use of this code

Uploading is only an optional preparatory suggestion in a tip, not a command or automatic step of this workflow. The actual usage takes an existing Drive file ID and announces it; the shown command does not read or upload a local file. Thus, the material does not support that this Skill itself copies local files to Drive. If a user separately chooses the upload command, that is an independent data operation requiring separate authorization.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
SKILL.md:18In the instructionsOpen original file
Announce a Drive file in a Chat space
Show 2 other places
SKILL.md:45In the instructionsOpen original file
- This is a write command — sends a Chat message.- Use `gws drive +upload` first to upload the file, then announce it here.- Fetches the file name from Drive to build the announcement.
SKILL.md:23In the instructionsOpen original file
```bashgws workflow +file-announce --file-id <ID> --space <SPACE>```
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

5 instruction sections

The Skill invokes `gws workflow +file-announce` to post an announcement using a user-supplied Drive file ID and Chat space name.

View source
SKILL.md:23In the instructionsOpen original file
```bashgws workflow +file-announce --file-id <ID> --space <SPACE>```
SKILL.md:30In the instructionsOpen original file
|------|----------|---------|-------------|| `--file-id` | ✓ | — | Drive file ID to announce || `--space` | ✓ | — | Chat space name (e.g. spaces/SPACE_ID) || `--message` | — | — | Custom announcement message || `--format` | — | — | Output format: json (default), table, yaml, csv |

The command reads the file name from Drive to construct the announcement and performs a write operation by sending a Google Chat message.

View source
SKILL.md:44In the instructionsOpen original file
- This is a write command — sends a Chat message.- Use `gws drive +upload` first to upload the file, then announce it here.- Fetches the file name from Drive to build the announcement.

Authentication, global flags, and security rules are not included in this material; the Skill requires a neighboring shared Skill and directs generation of it when absent.

View source
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Start here · InstructionsSKILL.md
gws-workflow-file-announce
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:22In the instructionsOpen original file
```bashgws workflow +file-announce --file-id <ID> --space <SPACE>
SKILL.md:37In the instructionsOpen original file
```bashgws workflow +file-announce --file-id FILE_ID --space spaces/ABC123
Lines read
52
File checksum (to compare versions)
5bc6c3f510019ff1173f3730ebd950b7ced3cf13998fa29e08360a9fc1e1d50b