Skip to content
skillsafebeta
← Report library
Purpose / Other

Recipe Send Team Announcement Skill Security Audit

What the author says it does (original text)

Send a team announcement via both Gmail and a Google Chat space.

Independent security check

Security risks found

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.Risks found: 1
Medium risk

The recipe can immediately publish an unconfirmed organizational announcement as the user

Source references: 3
What we found

The steps directly invoke Gmail and Chat send operations without requiring a draft preview, confirmation of the recipient and space, or validation between the two sends. The template also asserts that there are “policy changes” requiring review.

Why this matters

If an agent runs it unchanged or with mistaken parameters from an authenticated work account, an inaccurate policy notice could reach the wrong email address or Chat space, causing confusion, reputational harm, and organizational communication records that may be difficult to retract.

This is an execution-oriented sending recipe, not merely a warning or test: its steps direct an email to a team address and a message to a Google Chat space. The shown flow does not first present a draft, verify the real recipients/space, or request per-send confirmation. If an agent substitutes real targets and runs it, messages would be published through the user's authorized Google identity and could lead coworkers to believe policy changes exist. Sending is nevertheless the skill's stated purpose, and the source does not prove execution. A user can require draft-only output and confirmation of targets and text before sending.

SKILL.md:25In the instructionsOpen original file
1. Send email: `gws gmail +send --to team@company.com --subject 'Important Update' --body 'Please review the attached policy changes.'`2. Post in Chat: `gws chat +send --space spaces/TEAM_SPACE --text '📢 Important Update: Please check your email for policy changes.'`
Show 2 other places
SKILL.md:3In the instructionsOpen original file
name: recipe-send-team-announcementdescription: "Send a team announcement via both Gmail and a Google Chat space."metadata:
SKILL.md:26In the instructionsOpen original file
1. Send email: `gws gmail +send --to team@company.com --subject 'Important Update' --body 'Please review the attached policy changes.'`2. Post in Chat: `gws chat +send --space spaces/TEAM_SPACE --text '📢 Important Update: Please check your email for policy changes.'`

Inside this skill

1 instruction sections

This Skill is a two-channel announcement recipe: it instructs the agent to send an email through Gmail and post a message to a Google Chat space. Both commands perform outbound communication rather than merely creating drafts.

View source
SKILL.md:21In the instructionsOpen original file
Send a team announcement via both Gmail and a Google Chat space.## Steps1. Send email: `gws gmail +send --to team@company.com --subject 'Important Update' --body 'Please review the attached policy changes.'`2. Post in Chat: `gws chat +send --space spaces/TEAM_SPACE --text '📢 Important Update: Please check your email for policy changes.'`

Execution depends on `gws-gmail` and `gws-chat`, but their implementations are not included, so the supplied source does not allow verification of their authentication method, permission scope, or actual network behavior.

View source
SKILL.md:9In the instructionsOpen original file
    domain: "communication"    requires:      bins:        - gws      skills:        - gws-gmail        - gws-chat---
SKILL.md:19In the instructionsOpen original file
> **PREREQUISITE:** Load the following skills to execute this recipe: `gws-gmail`, `gws-chat`
Start here · InstructionsSKILL.md
recipe-send-team-announcement
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions
Lines read
28
File checksum (to compare versions)
df48ea59b696f87a93422d2a726a00de0b49b809af7e1924db9eb5e001859754