google-docs

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs network requests to official Google API endpoints (https://docs.googleapis.com/v1/documents). This is a well-known and trusted service for document management.
  • [SAFE]: Credential management follows best practices by utilizing the environment variable $GOOGLE_DOCS_TOKEN for OAuth bearer authentication rather than hardcoding secrets.
  • [SAFE]: The skill's logic is transparently implemented using standard system utilities (curl and jq). No obfuscation, dynamic code execution, or suspicious command patterns were detected.
  • [SAFE]: While the skill ingests external data (Google Doc content), which technically introduces a surface for indirect prompt injection, this behavior is the primary intended purpose of the skill and is implemented through explicit data extraction commands without unsafe code execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 02:27 AM
Security Audit — agent-trust-hub — google-docs