google-docs
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs network requests to official Google API endpoints (
https://docs.googleapis.com/v1/documents). This is a well-known and trusted service for document management. - [SAFE]: Credential management follows best practices by utilizing the environment variable
$GOOGLE_DOCS_TOKENfor OAuth bearer authentication rather than hardcoding secrets. - [SAFE]: The skill's logic is transparently implemented using standard system utilities (
curlandjq). No obfuscation, dynamic code execution, or suspicious command patterns were detected. - [SAFE]: While the skill ingests external data (Google Doc content), which technically introduces a surface for indirect prompt injection, this behavior is the primary intended purpose of the skill and is implemented through explicit data extraction commands without unsafe code execution.
Audit Metadata