bootgs-client
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate technical documentation and a helper utility for developers using the bootgs framework in Google Apps Script environments. The implementation uses standard GAS communication patterns (google.script.run) and correctly identifies platform-specific constraints like the lack of native HTTP headers.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a communication client that handles external input for transmission to a backend.
- Ingestion points: Data enters through the
pathname,query, andbodyparameters of thecallBootgsApifunction inassets/gas-http-client.ts. - Boundary markers: No specific delimiters or "ignore instructions" warnings are included in the implementation.
- Capability inventory: The client can trigger server-side logic in the Google Apps Script environment via the
google.script.runproxy. - Sanitization: The utility performs standard encoding (URLSearchParams) and serialization (JSON.stringify) but relies on the receiving controller for content validation.
Audit Metadata