Skip to content
skillsafebeta
← Report library
Purpose / Other

Gws Workflow Standup Report Skill Security Audit

What the author says it does (original text)

Google Workflow: Today's meetings + open tasks as a standup summary.

Independent security check

Security risks found

Files checked
1
Risks found
2
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Low risk

Output consolidates calendar meetings and open tasks

Source references: 5
What we found

The command combines today's agenda with the task list. Such output may contain meeting subjects, work schedules, and task content, and a consolidated summary is easier to copy or forward than records viewed separately. The supplied material does not show transmission to a third party, but the output still enters the terminal or agent session running the command.

Why this matters

If run in a shared terminal, logged agent session, or automated publishing flow, other people may see schedule and task information.

Legitimate use of this code

Combining today's meetings and tasks is the skill's explicitly stated purpose, and the example shows the user deliberately invoking it; this is not hidden collection. The supplied source shows no upload, forwarding, or third-party write and calls the workflow read-only. Its output may contain sensitive work details, but the evidence supports ordinary display to the command caller, not exfiltration. Users can still run it in a controlled terminal and handle the output carefully.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
SKILL.md:18In the instructionsOpen original file
Today's meetings + open tasks as a standup summary
Show 4 other places
SKILL.md:30In the instructionsOpen original file
|------|----------|---------|-------------|| `--format` | — | — | Output format: json (default), table, yaml, csv |
SKILL.md:42In the instructionsOpen original file
- Read-only — never modifies data.- Combines calendar agenda (today) with tasks list.
SKILL.md:23In the instructionsOpen original file
```bashgws workflow +standup-report```
SKILL.md:41In the instructionsOpen original file
- Read-only — never modifies data.- Combines calendar agenda (today) with tasks list.
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.Risks found: 1
Medium risk

The Skill directs generation of persistent Skill files when its shared prerequisite is absent

Source references: 2
What we found

The prerequisite explicitly says to run `gws generate-skills` when the shared Skill is missing. This is a file-generating setup action, while the “read-only” tip only claims that data is not modified and does not disclose this local file change. The generated content is not present in the audit material.

Why this matters

It may create persistent files in Skill or configuration locations; those new instructions could later affect authentication, global flags, and agent behavior.

This is a conditional local-change risk: if the shared prerequisite is missing, the documentation explicitly directs the user to run a generation command that may create local skill files. The later “read-only” statement concerns data modification and does not establish that the generator writes nothing. Its implementation, output paths, and generated content are absent. A user can require a file manifest and restrict generation until reviewed.

SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Show 1 other places
SKILL.md:41In the instructionsOpen original file
- Read-only — never modifies data.- Combines calendar agenda (today) with tasks list.
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

5 instruction sections

The main command summarizes today's calendar meetings and open tasks, with JSON, table, YAML, or CSV output.

View source
SKILL.md:18In the instructionsOpen original file
Today's meetings + open tasks as a standup summary
SKILL.md:23In the instructionsOpen original file
```bashgws workflow +standup-report```
SKILL.md:30In the instructionsOpen original file
|------|----------|---------|-------------|| `--format` | — | — | Output format: json (default), table, yaml, csv |

The Skill requires reading a shared Skill file that is not included in the audited material and instructs running a generation command if it is missing.

View source
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.

The documentation claims the workflow never modifies data, but the supplied material does not include the gws executable or command implementation, so only the claim—not the actual behavior—can be verified.

View source
SKILL.md:41In the instructionsOpen original file
- Read-only — never modifies data.- Combines calendar agenda (today) with tasks list.
Start here · InstructionsSKILL.md
gws-workflow-standup-report
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:22In the instructionsOpen original file
```bashgws workflow +standup-report
SKILL.md:34In the instructionsOpen original file
```bashgws workflow +standup-report
Lines read
48
File checksum (to compare versions)
cd46ddb94d1ff9872ae8719a932b19ce803c110ef2a6380b185fc4edc42b000a