blog-google
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Internal runner scripts use the subprocess module to manage the skill environment and execute verified sub-modules within a restricted directory.
- [EXTERNAL_DOWNLOADS]: The skill fetches content from external URLs for NLP analysis and installs dependencies from the official PyPI registry.
- [SAFE]: Sensitive configuration files are created with restrictive (0o600) permissions, and OAuth flows include CSRF state tokens to ensure secure authentication with Google services.
Audit Metadata