apps-script-services
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/check-quotas.shscript fetches content from the official Google Developers documentation to provide up-to-date quota information. - Evidence: URL used is
https://developers.google.com/apps-script/guides/services/quotas. - [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests and processes external data from a web page via the
check-quotas.shscript. - Ingestion points:
scripts/check-quotas.shfetches external HTML content usingcurl. - Boundary markers: No explicit delimiters or warnings are used to separate fetched content from instructions when displayed to the agent.
- Capability inventory: The skill allows network reads (via
curl) and provides guidance for writing Apps Script code. The script itself does not execute the fetched content. - Sanitization: The script includes a basic Python-based HTML stripper using regex to remove tags and normalize whitespace before outputting text.
Audit Metadata