Skip to content
skillsafebeta
← Report library
Purpose / Other

Gws Workflow Weekly Digest Skill Security Audit

What the author says it does (original text)

Google Workflow: Weekly summary: this week's meetings + unread email count.

Independent security check

Security risks found

Files checked
1
Risks found
2
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Medium risk

Digest output may expose calendar information to the agent session and logs

Source references: 4
What we found

The command reads and outputs the week's calendar agenda while summarizing unread Gmail. Meeting titles, participants, or schedules may be sensitive work information, but the documentation does not identify the calendar fields returned or offer a redaction option.

Why this matters

When run, digest content could appear in chat transcripts, terminal history, automation logs, or output visible to a calling service. The operation can broaden access to sensitive schedule information even if it does not modify Google data.

What this evidence establishes

The documentation confirms that the command outputs a weekly meeting agenda and a Gmail triage summary, so its results may contain sensitive work information. “Read-only” only means it does not modify data; it does not constrain what is displayed. However, the supplied source neither defines the calendar/email fields nor shows that output is persisted in logs, so the claimed log exposure cannot be confirmed. Users can ask for an exact output schema and redaction/minimization controls, and restrict session retention and output sharing.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
SKILL.md:18In the instructionsOpen original file
Weekly summary: this week's meetings + unread email count
Show 3 other places
SKILL.md:23In the instructionsOpen original file
```bashgws workflow +weekly-digest```
SKILL.md:42In the instructionsOpen original file
- Read-only — never modifies data.- Combines calendar agenda (week) with gmail triage summary.
SKILL.md:41In the instructionsOpen original file
- Read-only — never modifies data.- Combines calendar agenda (week) with gmail triage summary.
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.Risks found: 1
Medium risk

Use introduces shared instructions absent from the reviewed material

Source references: 2
What we found

The Skill requires the agent to read `../gws-shared/SKILL.md` and, if absent, create it through `gws generate-skills`. That shared file is designated to control authentication, global flags, and security rules, but neither its contents nor the generator implementation is included here.

Why this matters

If the shared file or the installed `gws` generator comes from an untrusted or substituted installation, the agent could adopt authentication or security instructions outside this audit. The supplied evidence does not show that such substitution has occurred.

This is an active prerequisite: before using the skill, the agent must read a shared skill outside the audited material and, if absent, run a generation command. That external file governs authentication, global flags, and security rules, but neither its contents nor the generator are supplied, so users cannot determine from this evidence what credentials, permissions, or actions it may request. Users can ask the author to provide both artifacts for review and prohibit generation or adoption of new instructions until verified.

SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Show 1 other places
SKILL.md:46In the instructionsOpen original file
- [gws-shared](../gws-shared/SKILL.md) — Global flags and auth- [gws-workflow](../gws-workflow/SKILL.md) — All cross-service productivity workflows commands
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

5 instruction sections

The Skill runs `gws workflow +weekly-digest` to combine the current week's calendar agenda with a Gmail unread-email summary; the documentation describes the operation as read-only.

View source
SKILL.md:23In the instructionsOpen original file
```bashgws workflow +weekly-digest```
SKILL.md:41In the instructionsOpen original file
- Read-only — never modifies data.- Combines calendar agenda (week) with gmail triage summary.

The Skill depends on the `gws` executable and requires reading a neighboring shared Skill before use; if that file is absent, it instructs the agent to run a generation command. The supplied material contains neither that shared file nor the CLI implementation, so its authentication rules, network destinations, and underlying data handling cannot be verified from this evidence.

View source
SKILL.md:8In the instructionsOpen original file
    category: "productivity"    requires:      bins:        - gws    cliHelp: "gws workflow +weekly-digest --help"---
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Start here · InstructionsSKILL.md
gws-workflow-weekly-digest
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:22In the instructionsOpen original file
```bashgws workflow +weekly-digest
SKILL.md:34In the instructionsOpen original file
```bashgws workflow +weekly-digest
Lines read
48
File checksum (to compare versions)
a89fdb894ff1aa68b30ea7c240725e8f880dafda379faedc4053f0e6030b9a0a