Skip to content
Report library
Purpose / Writing

Recipe Draft Email From Doc Skill Security Audit

What the author says it does (original text)

Read content from a Google Doc and use it as the body of a Gmail message.

Independent security check

Do not install or run it yet

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
High risk

The “draft” workflow actually sends the full document, risking unconfirmed disclosure

Source references: 2
What we found

The title says “Draft a Gmail Message,” but the execution step invokes `+send`; it neither creates a draft nor requires the user to verify the recipient, body, or approve transmission. It also copies the document body without limiting what may be disclosed.

Why this matters

If the document contains confidential, personal, or internal information, this step immediately transmits it to the specified recipient. A wrong address, an unchanged example address, or a user expecting only a preview could result in an email that cannot be recalled.

The source supports this risk. The skill describes the task as “Draft,” but its actual workflow retrieves a Google Doc, copies its body, and invokes Gmail `+send` to a recipient; the shown steps neither create a draft nor require pre-send confirmation. If an agent has the required Docs and Gmail access and runs the recipe, document content could be sent before the user verifies the recipient, subject, or disclosure scope. A user can ask the author to create a Gmail draft and require explicit review of recipient, subject, and body before sending, or restrict Gmail permission to draft creation only.

SKILL.md:17In the instructionsOpen original file
# Draft a Gmail Message from a Google Doc> **PREREQUISITE:** Load the following skills to execute this recipe: `gws-docs`, `gws-gmail`Read content from a Google Doc and use it as the body of a Gmail message.
Show 1 other places
SKILL.md:25In the instructionsOpen original file
1. Get the document content: `gws docs documents get --params '{"documentId": "DOC_ID"}'`2. Copy the text from the body content3. Send the email: `gws gmail +send --to recipient@example.com --subject 'Newsletter Update' --body 'CONTENT_FROM_DOC'`
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

1 instruction sections

The Skill requires Google Docs and Gmail capabilities, reads a Google document by document ID, and then sends its body text as an email body to an example recipient.

View source
SKILL.md:19In the instructionsOpen original file
> **PREREQUISITE:** Load the following skills to execute this recipe: `gws-docs`, `gws-gmail`
SKILL.md:25In the instructionsOpen original file
1. Get the document content: `gws docs documents get --params '{"documentId": "DOC_ID"}'`2. Copy the text from the body content3. Send the email: `gws gmail +send --to recipient@example.com --subject 'Newsletter Update' --body 'CONTENT_FROM_DOC'`
Start here · InstructionsSKILL.md
recipe-draft-email-from-doc
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions
Lines read
29
File checksum (to compare versions)
6ab30c16868cf62dab530f35c4d44f4484e9d30ab3a001013480aaa5b17108fe