gdrive-access
Warn
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to build a local binary from source (
bun install && bun run build) and interacts with the 1Password CLI (op) to scan the user's 'Employee' vault for Google Drive credentials. - [EXTERNAL_DOWNLOADS]: The skill performs runtime installation of Node.js dependencies via the
bun installcommand, which fetches packages from external public registries. - [COMMAND_EXECUTION]: The instructions include a 'Self-Evolving Skill' section that directs the AI agent to rewrite the
SKILL.mdfile itself based on its success or failure. This self-modification pattern allows the skill to persist changes to its internal logic and constraints, which could be leveraged to bypass safety guidelines or maintain persistence across sessions.
Audit Metadata