Skip to content
skillsafebeta
← Report library
Purpose / Other

Recipe Organize Drive Folder Skill Security Audit

What the author says it does (original text)

Create a Google Drive folder structure and move files into the right locations.

Independent security check

Security risks found

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.Risks found: 1
Medium risk

The move command removes the file’s existing parent relationship

Source references: 3
What we found

Step 3 does more than add a file to a new folder: `removeParents` removes its old parent relationship. The instructions do not require checking the file, old parent, and destination first, nor do they provide a preview or per-item confirmation.

Why this matters

If placeholder IDs are replaced incorrectly, real Drive files can disappear from their expected location, land in the wrong project structure, or become visible to different people through the destination folder’s sharing settings. The verification step lists destination contents but cannot automatically undo the move.

This is an active execution step, not a warning example. `removeParents` removes the specified file's old parent relationship while adding the new folder. That matches the stated purpose of moving files, so it is not out-of-scope behavior; however, an incorrect FILE_ID, FOLDER_ID, or OLD_PARENT_ID could make a file disappear from its original location, and verification occurs only afterward. The user can require a pre-change listing and item-by-item confirmation, or initially add the new parent without removing the old one.

SKILL.md:26In the instructionsOpen original file
2. Create sub-folders: `gws drive files create --json '{"name": "Documents", "mimeType": "application/vnd.google-apps.folder", "parents": ["PARENT_FOLDER_ID"]}'`3. Move existing files into folder: `gws drive files update --params '{"fileId": "FILE_ID", "addParents": "FOLDER_ID", "removeParents": "OLD_PARENT_ID"}'`4. Verify structure: `gws drive files list --params '{"q": "FOLDER_ID in parents"}' --format table`
Show 2 other places
SKILL.md:27In the instructionsOpen original file
3. Move existing files into folder: `gws drive files update --params '{"fileId": "FILE_ID", "addParents": "FOLDER_ID", "removeParents": "OLD_PARENT_ID"}'`4. Verify structure: `gws drive files list --params '{"q": "FOLDER_ID in parents"}' --format table`
SKILL.md:3In the instructionsOpen original file
name: recipe-organize-drive-folderdescription: "Create a Google Drive folder structure and move files into the right locations."metadata:
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

1 instruction sections

The Skill’s stated purpose is to use `gws` to create project folders and subfolders in Google Drive and reorganize existing files.

View source
SKILL.md:20In the instructionsOpen original file
Create a Google Drive folder structure and move files into the right locations.
SKILL.md:24In the instructionsOpen original file
1. Create a project folder: `gws drive files create --json '{"name": "Q2 Project", "mimeType": "application/vnd.google-apps.folder"}'`2. Create sub-folders: `gws drive files create --json '{"name": "Documents", "mimeType": "application/vnd.google-apps.folder", "parents": ["PARENT_FOLDER_ID"]}'`3. Move existing files into folder: `gws drive files update --params '{"fileId": "FILE_ID", "addParents": "FOLDER_ID", "removeParents": "OLD_PARENT_ID"}'`

Execution depends on the external `gws` program and the `gws-drive` Skill. Their installation and implementation are not included, so these lines do not establish what permissions they obtain or what additional actions they perform.

View source
SKILL.md:9In the instructionsOpen original file
    domain: "productivity"    requires:      bins:        - gws      skills:        - gws-drive---
SKILL.md:18In the instructionsOpen original file
> **PREREQUISITE:** Load the following skills to execute this recipe: `gws-drive`

The final step only lists items under the target parent folder to inspect the result; it does not restore the prior parent relationship.

View source
SKILL.md:27In the instructionsOpen original file
3. Move existing files into folder: `gws drive files update --params '{"fileId": "FILE_ID", "addParents": "FOLDER_ID", "removeParents": "OLD_PARENT_ID"}'`4. Verify structure: `gws drive files list --params '{"q": "FOLDER_ID in parents"}' --format table`
Start here · InstructionsSKILL.md
recipe-organize-drive-folder
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions
Lines read
29
File checksum (to compare versions)
3ccd333b8b70094954a0d31c23d7cf2413708c85cee1fcea596d110af61fd600