gog
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
gogcommand-line interface to interact with the local system and Google API services. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially malicious content from external Google services, creating a surface for indirect prompt injection attacks.
- Ingestion points: Content retrieved via
gogfrom Gmail, Google Drive, Docs, and Sheets as described inSKILL.md. - Boundary markers: The skill instructs the agent to use the
--wrap-untrustedflag in command templates to isolate external content. - Capability inventory: The CLI possesses broad capabilities including reading, writing, and deleting data across multiple Google services, as well as sending emails.
- Sanitization: Security is dependent on the
--wrap-untrustedCLI flag and manual oversight requirements such as--dry-runand explicit user intent for mutations.
Audit Metadata