gdrv-cli
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the 'gdrv' command-line tool for file and folder management on Google Drive. The commands are specific to the tool's intended purpose and do not appear to be malicious.- [INDIRECT_PROMPT_INJECTION]: As the skill interacts with external data (Google Drive file names and listing results), there is a standard surface for indirect prompt injection if malicious filenames are encountered. This is an inherent risk of file management tools and is considered a low-level concern mitigated by agent safety layers.- [DATA_EXPOSURE]: The skill manages credentials using an environment variable ('GDRV_CREDENTIALS') pointing to a local file path, which is a standard and recommended practice for CLI tools to avoid hardcoding secrets.
Audit Metadata