apps-script-utils
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The script
scripts/check-latest-version.shfetches metadata from the official npm registry and parses it using a Python one-liner. The operation targets the well-known npm registry domain (registry.npmjs.org) to retrieve version information, which is a common and safe administrative task.\n - Evidence:
LATEST=$(curl -sL --fail "https://registry.npmjs.org/${PKG}/latest" | python3 -c "import json,sys; print(json.load(sys.stdin)['version'])" 2>/dev/null)\n- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests data from an external source (npm registry), though the content is restricted to package metadata and processed via a standard parser.\n - Ingestion points: Metadata is retrieved from the npm registry in
scripts/check-latest-version.sh.\n - Boundary markers: No explicit delimiters are used to wrap the registry's response.\n
- Capability inventory: The skill uses
curlfor network access andpython3for JSON parsing and reading local configuration files.\n - Sanitization: Ingested content is processed through a formal JSON parser rather than being directly executed or interpreted as instructions.
Audit Metadata