bootgs-client
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documentation and provided script (
assets/gas-http-client.ts) serve as a developer utility for Google Apps Script integrations. It facilitates standard communication between an HtmlService frontend and a server-side backend. - [SAFE]: No instances of prompt injection, data exfiltration, or malicious persistence mechanisms were detected. The skill uses the native
google.script.runAPI for communication, which is restricted to the Google Apps Script environment. - [SAFE]: The provided code includes safety checks, such as explicitly restricting
google.script.runcalls to thedoGetanddoPostfunctions. It does not useeval()or other dynamic execution patterns that could be exploited. - [SAFE]: All resource names and naming conventions (e.g.,
bootgs) align with the documented author identity and framework purpose, showing no signs of typosquatting or impersonation.
Audit Metadata