Skip to content
skillsafebeta
← Report library
Purpose / Other

Persona Sales Ops Skill Security Audit

What the author says it does (original text)

Manage sales workflows — track deals, schedule calls, client comms.

Independent security check

Security risks found

Files checked
1
Risks found
4
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Medium risk

Proposal uploads may expose sensitive business files to the wrong audience

Source references: 3
What we found

The Skill tells the agent to upload and “share” proposals through Drive without requiring confirmation of the file, destination folder, recipients, or sharing permissions.

Why this matters

If the wrong file or location is selected, pricing, client information, or contract terms could become accessible to unintended people.

This is a plausible risk to user files. The skill directly instructs uploading proposals to Drive for sharing, but the instruction does not identify the destination folder, recipients, or access permissions. Defaults could therefore place or expose a commercial proposal incorrectly, although the source does not show that any mistaken sharing occurred. A user can require confirmation of the file, destination, and permissions before upload.

SKILL.md:33In the instructionsOpen original file
- Convert follow-up emails into tasks with `gws workflow +email-to-task`.- Share proposals by uploading to Drive with `gws drive +upload`.- Get a weekly sales pipeline summary with `gws workflow +weekly-digest`.
Show 2 other places
SKILL.md:39In the instructionsOpen original file
- Schedule follow-up calls immediately after meetings to maintain momentum.- Keep all client-facing documents in a dedicated shared Drive folder.
SKILL.md:3In the instructionsOpen original file
name: persona-sales-opsdescription: "Manage sales workflows — track deals, schedule calls, client comms."metadata:
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.Risks found: 1
Medium risk

Deal records and tasks may be modified without preview or deduplication

Source references: 2
What we found

The Skill directs the agent to append deal updates and convert follow-up emails into tasks without defining the target sheet, field mapping, task ownership, deduplication, or pre-write confirmation.

Why this matters

Misclassification or repeated runs could corrupt pipeline data, create duplicate tasks, or copy client-email content into an inappropriate shared system.

These instructions write to business records: one appends deal data and the other converts email into a task. The shown instructions do not identify the target sheet, field mapping, task owner, duplicate handling, or a pre-write preview. Wrong context or repeated execution could corrupt tracking data or create duplicate/misassigned tasks. The source does not reveal whether the underlying workflows add safeguards. Users can require explicit targets and confirmation before writes.

SKILL.md:31In the instructionsOpen original file
- Prepare for client calls with `gws workflow +meeting-prep` to review attendees and agenda.- Log deal updates in a tracking spreadsheet with `gws sheets +append`.- Convert follow-up emails into tasks with `gws workflow +email-to-task`.- Share proposals by uploading to Drive with `gws drive +upload`.
Show 1 other places
SKILL.md:32In the instructionsOpen original file
- Log deal updates in a tracking spreadsheet with `gws sheets +append`.- Convert follow-up emails into tasks with `gws workflow +email-to-task`.- Share proposals by uploading to Drive with `gws drive +upload`.
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.Risks found: 1
Low risk

The persona depends on several high-value Workspace permission domains

Source references: 2
What we found

The prerequisite loads Gmail, Calendar, Sheets, and Drive capabilities together, while the instructions do not constrain the account, folder, spreadsheet, or least-privilege scope.

Why this matters

If the underlying tools receive broad permissions, an agent error could affect email, calendars, sales records, and documents. This file alone does not reveal the actual OAuth scopes.

What this evidence establishes

The source does require Gmail, Calendar, Sheets, and Drive skills together, which may access sensitive mail, schedules, and files. However, it only lists skill dependencies; it does not show OAuth scopes, account selection, or the implementations of those dependencies. Broad permissions therefore cannot be confirmed from this source. Users should request the dependency permission list and restrict access to designated accounts and resources.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
SKILL.md:8In the instructionsOpen original file
    category: "persona"    requires:      bins:        - gws      skills:        - gws-gmail        - gws-calendar        - gws-sheets        - gws-drive---
Show 1 other places
SKILL.md:20In the instructionsOpen original file
> **PREREQUISITE:** Load the following utility skills to operate as this persona: `gws-gmail`, `gws-calendar`, `gws-sheets`, `gws-drive`
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.Risks found: 1
Medium risk

External meeting commitments may be created without confirmation

Source references: 3
What we found

The Skill recommends scheduling follow-up calls immediately after meetings but does not require confirmation of the time, attendees, time zone, or whether an invitation should be sent.

Why this matters

The agent could send an incorrect or unauthorized calendar invitation to a client, causing conflicts, confusion, or an unintended business commitment.

Calendar scheduling is within the stated sales purpose, but “schedule … immediately” could still create a real invitation or external commitment. The instruction does not require checking attendees, time, time zone, or approval first, creating a risk of incorrect invitations if automated. The source supports that possibility, not that an unconfirmed meeting must be created. Users can restrict it to proposing times or previewing an invitation first.

SKILL.md:13In the instructionsOpen original file
        - gws-gmail        - gws-calendar        - gws-sheets
Show 2 other places
SKILL.md:38In the instructionsOpen original file
- Use `gws gmail +triage --query 'from:client-domain.com'` to filter client emails.- Schedule follow-up calls immediately after meetings to maintain momentum.- Keep all client-facing documents in a dedicated shared Drive folder.
SKILL.md:3In the instructionsOpen original file
name: persona-sales-opsdescription: "Manage sales workflows — track deals, schedule calls, client comms."metadata:

Inside this skill

3 instruction sections

This Skill is a sales-operations persona that requires Gmail, Calendar, Sheets, and Drive utilities, so its workflows may access email, calendars, deal spreadsheets, and cloud files.

View source
SKILL.md:20In the instructionsOpen original file
> **PREREQUISITE:** Load the following utility skills to operate as this persona: `gws-gmail`, `gws-calendar`, `gws-sheets`, `gws-drive`

It directs the agent to perform Google Workspace mutations, including appending deal records, converting emails into tasks, and uploading proposals; these are not read-only operations.

View source
SKILL.md:31In the instructionsOpen original file
- Prepare for client calls with `gws workflow +meeting-prep` to review attendees and agenda.- Log deal updates in a tracking spreadsheet with `gws sheets +append`.- Convert follow-up emails into tasks with `gws workflow +email-to-task`.- Share proposals by uploading to Drive with `gws drive +upload`.- Get a weekly sales pipeline summary with `gws workflow +weekly-digest`.

The Skill also recommends filtering client email by domain, reviewing meeting attendees and agendas, and scheduling follow-up calls immediately after meetings.

View source
SKILL.md:30In the instructionsOpen original file
## Instructions- Prepare for client calls with `gws workflow +meeting-prep` to review attendees and agenda.- Log deal updates in a tracking spreadsheet with `gws sheets +append`.
SKILL.md:37In the instructionsOpen original file
## Tips- Use `gws gmail +triage --query 'from:client-domain.com'` to filter client emails.- Schedule follow-up calls immediately after meetings to maintain momentum.- Keep all client-facing documents in a dedicated shared Drive folder.
Start here · InstructionsSKILL.md
persona-sales-ops
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions
Lines read
41
File checksum (to compare versions)
f4d2445e76e999d5725c676cfd6243e33be2fe6d8e8f0314600a0c73e232293c