google-apps-script

Warn

Audited by Runlayer on Feb 22, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
5
Flagged
5
Chunks
6
Flagged Files (5)
.claude-plugin/plugin.jsonHIGH
78.3%

Malicious tool definition detected

Tool: .claude-plugin/plugin.json Description: { "name": "google-apps-script",

SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/2] Description: --- name: google-apps-script description: "Build Google Apps Script automation for Sheets and Workspace apps.

Tool: SKILL.md [2/2] Description: 'doTheWork'); } // MUST be public (no underscore) for the dialog to call it function doTheWork() { // ...

references/patterns.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/patterns.md Description: # Common Patterns Code examples for Google Apps Script patterns.

references/quotas.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/quotas.md Description: # Quotas, Limits, and Debugging ## Quotas | Resource | Free Account | Google Workspace | |----------|-------------|-----------------| | Script runtime | 6 min / execution | 6 min / execution | | Time-driven trigger runtime | 30 min | 30 min | | Triggers total daily runtime | 90 min | 6 hours | | Triggers total | 20 per user per script | 20 per user per script | | Email recipients/day | 100 | 1,500 | | URL Fetch calls/day | 20,000 | 100,000 | | Properties s

references/recipes.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/recipes.md Description: # Recipes Complete automation recipes ready to adapt.

Audit Metadata
Max File Score
78%
Classification
KNOWN_SERVER_KNOWN_TOOL_LIST
Files Scanned
5
Files Flagged
5
Chunks Analyzed
6
Analyzed
Feb 22, 2026, 08:40 PM
Security Audit — runlayer — google-apps-script