gog
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the gog CLI utility to perform tasks such as sending emails, searching files, and managing calendar events within the Google Workspace ecosystem.
- [EXTERNAL_DOWNLOADS]: The skill is configured to install the gog tool using a third-party Homebrew tap (steipete/tap/gogcli).
- [PROMPT_INJECTION]: The skill exposes an indirect prompt injection surface by ingesting untrusted data from external sources like emails and documents. * Ingestion points: Content is retrieved from Gmail messages, Google Docs, and Sheets via search and display commands. * Boundary markers: There are no explicit delimiters or instructions provided to the agent to differentiate between system instructions and data content. * Capability inventory: The skill can execute write operations, including sending emails (gog gmail send) and modifying spreadsheets (gog sheets update). * Sanitization: No content sanitization or validation methods are specified for the data ingested from Google services.
Audit Metadata