Skip to content
skillsafebeta
← Report library
Purpose / Other

Gws Workflow Meeting Prep Skill Security Audit

What the author says it does (original text)

Google Workflow: Prepare for your next meeting: agenda, attendees, and linked docs.

Independent security check

Security risks found

Files checked
1
Risks found
2
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.Risks found: 1
Medium risk

Missing dependency triggers file generation despite the “never modifies data” claim

Source references: 3
What we found

If the shared Skill file is absent, the instructions say to run `gws generate-skills`. Generating Skills is intended to create files, while the later blanket statement says the Skill is read-only and “never modifies data” without excluding this prerequisite. The material does not identify generation paths, overwrite behavior, or generated contents.

Why this matters

The setup flow may leave persistent files in the user's environment and, if the tool supports replacement, could affect existing Skill configuration; the supplied evidence does not establish the exact scope.

When the dependency is missing, the active instruction runs a command intended to create local Skill files. The supplied material does not state the destination, generated contents, or overwrite behavior. “Read-only” can reasonably refer to calendar data, but it does not account for this local write. A user can ask for the generation targets and overwrite rules, or permit generation only in an isolated directory.

SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Show 2 other places
SKILL.md:40In the instructionsOpen original file
## Tips- Read-only — never modifies data.- Shows the next upcoming event with attendees and description.
SKILL.md:42In the instructionsOpen original file
- Read-only — never modifies data.- Shows the next upcoming event with attendees and description.
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.Risks found: 1
Medium risk

Loads external authentication and security instructions absent from the reviewed package

Source references: 3
What we found

The Skill requires the agent to read the neighboring `gws-shared/SKILL.md` as the source of authentication, global flags, and security rules, but that file is not included in the submitted material. This review therefore cannot verify whether those added instructions broaden data access, request extra permissions, or alter where output goes.

Why this matters

When present, that unaudited file can control how the agent handles calendar and authentication data. A malicious or substituted file could direct operations unrelated to meeting preparation.

What this evidence establishes

The Skill does require loading an adjacent Skill that was not supplied, so its authentication, security rules, and permission scope cannot be audited. The visible text only describes meeting preparation and read-only access; it does not show that the external instructions expand access or redirect output. A user can request the exact pinned dependency and withhold additional Google permissions until it is reviewed.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Show 2 other places
SKILL.md:18In the instructionsOpen original file
Prepare for your next meeting: agenda, attendees, and linked docs
SKILL.md:42In the instructionsOpen original file
- Read-only — never modifies data.- Shows the next upcoming event with attendees and description.
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

5 instruction sections

The Skill's main operation runs `gws workflow +meeting-prep`, using the primary calendar by default or another specified calendar.

View source
SKILL.md:22In the instructionsOpen original file
```bashgws workflow +meeting-prep```
SKILL.md:28In the instructionsOpen original file
| Flag | Required | Default | Description ||------|----------|---------|-------------|| `--calendar` | — | primary | Calendar ID (default: primary) || `--format` | — | — | Output format: json (default), table, yaml, csv |

The output includes the next meeting's attendees and description, so identities, meeting context, and any links or notes in that calendar entry are processed and displayed by `gws`.

View source
SKILL.md:42In the instructionsOpen original file
- Read-only — never modifies data.- Shows the next upcoming event with attendees and description.
Start here · InstructionsSKILL.md
gws-workflow-meeting-prep
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:22In the instructionsOpen original file
```bashgws workflow +meeting-prep
SKILL.md:35In the instructionsOpen original file
```bashgws workflow +meeting-prep
Lines read
49
File checksum (to compare versions)
72634dbab4e911f748f5f3975a74ce5f3312c5aca66ce723969905bfc3d5abd5