skills/bootgs/skills/bootgs-client/Gen Agent Trust Hub

bootgs-client

Pass

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documentation and provided script (assets/gas-http-client.ts) serve as a developer utility for Google Apps Script integrations. It facilitates standard communication between an HtmlService frontend and a server-side backend.
  • [SAFE]: No instances of prompt injection, data exfiltration, or malicious persistence mechanisms were detected. The skill uses the native google.script.run API for communication, which is restricted to the Google Apps Script environment.
  • [SAFE]: The provided code includes safety checks, such as explicitly restricting google.script.run calls to the doGet and doPost functions. It does not use eval() or other dynamic execution patterns that could be exploited.
  • [SAFE]: All resource names and naming conventions (e.g., bootgs) align with the documented author identity and framework purpose, showing no signs of typosquatting or impersonation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 13, 2026, 11:47 AM
Security Audit — agent-trust-hub — bootgs-client