gog
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automates the installation of the
gogcommand-line utility via a third-party Homebrew tap (steipete/tap/gogcli). - [COMMAND_EXECUTION]: The skill utilizes the
gogbinary to execute operations across various Google services, including searching messages, sending emails, and updating spreadsheets. - [PROMPT_INJECTION]: The skill ingests untrusted data from external sources such as email content, document text, and spreadsheet data (e.g., via
gog gmail searchandgog docs cat). - Ingestion points: Gmail search results, Drive search results, Docs content, and Sheets values.
- Boundary markers: Absent; there are no specific delimiters or instructions to ignore embedded commands in the ingested data.
- Capability inventory: The skill possesses the ability to send emails (
gog gmail send), create/update calendar events, and modify Sheets data. - Sanitization: No explicit sanitization or filtering of external content is mentioned in the instructions.
Audit Metadata