skills/bootgs/skills/bootgs-client/Gen Agent Trust Hub

bootgs-client

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate technical documentation and a helper utility for developers using the bootgs framework in Google Apps Script environments. The implementation uses standard GAS communication patterns (google.script.run) and correctly identifies platform-specific constraints like the lack of native HTTP headers.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a communication client that handles external input for transmission to a backend.
  • Ingestion points: Data enters through the pathname, query, and body parameters of the callBootgsApi function in assets/gas-http-client.ts.
  • Boundary markers: No specific delimiters or "ignore instructions" warnings are included in the implementation.
  • Capability inventory: The client can trigger server-side logic in the Google Apps Script environment via the google.script.run proxy.
  • Sanitization: The utility performs standard encoding (URLSearchParams) and serialization (JSON.stringify) but relies on the receiving controller for content validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 05:08 PM