This report does not block or authorize the manifest or ZIP.
Static analysis flagged command execution, path traversal, and weak crypto patterns, but review found the command matches are Markdown examples for the intended gws CLI and the weak crypto matches are text false positives. The skill is not malicious, but it should be published with a warning because it can access authenticated Google Keep data, download attachments, manage permissions, and delete notes.
Report position
Historical report
Open audit history before using this report to install.
Audit attestation
Not attestable
The required immutable binding is incomplete.
Human verification
Not verified
No human verification is recorded for this report.
Coverage
1 Files scanned · 50 Lines analyzed
1 item shown for review
Limitations
This report does not claim runtime or sandbox execution and does not prove the absence of side effects.
01
Evidence chain
Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.
TRUE POSITIVE for sensitive data impact. The skill documents commands that can download attachments, create notes, delete notes, get notes, list notes, and operate on permissions. These are legitimate Google Keep capabilities, but they can expose or modify authenticated user data. Confidence: 0.86. Confidence reasoning: The line evidence directly lists Keep data operations, including attachment download and note deletion. No malicious destination or hidden exfiltration path was found.
The line evidence directly lists Keep data operations, including attachment download and note deletion. No malicious destination or hidden exfiltration path was found.
03
Risk findings
Confirmed security concerns are separated from items that still need review.
No confirmed security findings were recorded for this completed audit.
04
Expert evidence
Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.
Artifact subject
Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable
Analysis metadata
Audit model: codex
Analysis state: Complete
Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.
External Command Findings Are Intended CLI Examples
FALSE POSITIVE for command injection. The flagged lines show fixed Markdown examples for the gws CLI, including help and schema discovery commands. They do not build shell commands from user-controlled input. Confidence: 0.94. Confidence reasoning: The snippets are static documentation examples and no dynamic command construction appears in the scanned file.
The snippets are static documentation examples and no dynamic command construction appears in the scanned file.
Relative Shared Skill Reference Is Not Path Traversal Code
FALSE POSITIVE for filesystem path traversal. The relative path points to a sibling Google Workspace shared skill document for authentication and security rules. It is a documentation dependency, not executable file access or unsanitized path handling. Confidence: 0.88. Confidence reasoning: The evidence is a prerequisite sentence, and the scanned file contains no code that opens or writes paths.
The evidence is a prerequisite sentence, and the scanned file contains no code that opens or writes paths.
Weak Cryptography Findings Are Text False Positives
FALSE POSITIVE for weak cryptography. Lines 3 and 33 contain natural language metadata and pagination text, not cryptographic algorithms or implementations. No evidence found of MD5, SHA-1, DES, or other weak cryptographic use in the scanned file. Confidence: 0.97. Confidence reasoning: Manual review of both flagged lines found only descriptive prose and no crypto API, digest generation, or security-sensitive hashing.
Manual review of both flagged lines found only descriptive prose and no crypto API, digest generation, or security-sensitive hashing.