google-drive-operator

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install official Google API client libraries from PyPI (google-api-python-client, google-auth-httplib2, google-auth-oauthlib). These are well-known, trusted packages from a reputable vendor.
  • [COMMAND_EXECUTION]: The skill includes code snippets for listing, reading, creating, and deleting files on Google Drive. These operations are performed through the official Google Drive API and require valid user authorization via a token.json file. There is no evidence of arbitrary or malicious command execution.
  • [DATA_EXFILTRATION]: While the skill facilitates reading document content and image URIs, it does so within the context of the user's authorized Google account for the purpose of document management and restructuring. No patterns for sending this data to unauthorized external domains were detected.
  • [CREDENTIALS_UNSAFE]: The skill correctly handles sensitive information by instructing users to use an OAuth 2.0 Client ID and a locally cached token.json file. No hardcoded API keys or secrets are present in the provided instructions.
  • [PROMPT_INJECTION]: No instructions were found that attempt to bypass safety guidelines or override agent behavior. The content is strictly focused on providing technical implementation details for Google API integration.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 08:04 PM
Security Audit — agent-trust-hub — google-drive-operator