Skip to content
skillsafebeta
← Report library
Purpose / Other

Persona Exec Assistant Skill Security Audit

What the author says it does (original text)

Manage an executive's schedule, inbox, and communications.

Independent security check

Do not install or run it yet

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.Risks found: 1
High risk

The “draft replies” step invokes a send command without requiring approval

Source references: 3
What we found

The Skill describes `gws gmail +send` as “Draft replies,” even though the command is explicitly named send. Unlike calendar changes, the text does not require the executive to approve the message, recipients, or sending action first.

Why this matters

If the agent executes the command literally, a message intended only as a draft could be sent from the executive's account, creating unauthorized commitments, disclosure, reputational harm, or commercial consequences.

The skill explicitly uses a Gmail operation named `+send` to “Draft replies,” while prior confirmation is required only for calendar changes, not email content, recipients, or transmission. If `gws gmail +send` sends immediately, the agent could communicate externally when the user authorized only drafting, affecting the executive’s communications, reputation, or sensitive information. The user can ask whether this command only creates drafts and require explicit approval before sending.

SKILL.md:34In the instructionsOpen original file
- Schedule meetings with `gws calendar +insert` — always check for conflicts first using `gws calendar +agenda`.- Draft replies with `gws gmail +send` — keep tone professional and concise.
Show 2 other places
SKILL.md:37In the instructionsOpen original file
## Tips- Always confirm calendar changes with the executive before committing.- Use `--format table` for quick visual scans of agenda and triage output.
SKILL.md:3In the instructionsOpen original file
name: persona-exec-assistantdescription: "Manage an executive's schedule, inbox, and communications."metadata:

Inside this skill

3 instruction sections

The Skill requires Gmail, Calendar, Drive, and Chat capabilities and lists workflows for standups, meeting preparation, weekly digests, inbox triage, and scheduling. Enabling it therefore gives the assistant broad access to workplace information, although the provided text does not show data being transmitted to a third party.

View source
SKILL.md:8In the instructionsOpen original file
    category: "persona"    requires:      bins:        - gws      skills:        - gws-gmail        - gws-calendar        - gws-drive        - gws-chat---
SKILL.md:24In the instructionsOpen original file
## Relevant Workflows- `gws workflow +standup-report`- `gws workflow +meeting-prep`- `gws workflow +weekly-digest`

Calendar operations include two explicit safeguards: checking for conflicts before inserting a meeting and obtaining the executive's confirmation before committing calendar changes.

View source
SKILL.md:33In the instructionsOpen original file
- Triage the inbox with `gws gmail +triage --max 10` — prioritize emails from direct reports and leadership.- Schedule meetings with `gws calendar +insert` — always check for conflicts first using `gws calendar +agenda`.- Draft replies with `gws gmail +send` — keep tone professional and concise.
SKILL.md:37In the instructionsOpen original file
## Tips- Always confirm calendar changes with the executive before committing.- Use `--format table` for quick visual scans of agenda and triage output.
Start here · InstructionsSKILL.md
persona-exec-assistant
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions
Lines read
41
File checksum (to compare versions)
0492f94332fc122deacd128feb0f8f83bb9a6895089ee02f21a2dfc239f7ddbe