Skills
Navigate
skills/bootgs/skills/apps-script-triggers/Gen Agent Trust Hub

apps-script-triggers

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for processing event objects from Google Sheets and Google Forms. This data is externally controlled and represents an ingestion surface for untrusted input.
  • Ingestion points: onEdit, onChange, and onFormSubmit handler arguments (SKILL.md).
  • Boundary markers: Absent.
  • Capability inventory: The handlers described can interact with external APIs via UrlFetchApp and send emails via MailApp.
  • Sanitization: Absent.
  • [COMMAND_EXECUTION]: The skill documentation includes examples of executing shell scripts using bash.
  • Evidence: Reference to bash ../apps-script-services/scripts/check-quotas.sh in the Quotas section.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 05:08 PM