google-drive-automation
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Google Drive which introduces a surface for indirect prompt injection.\n
- Ingestion points: Tools such as
GOOGLEDRIVE_FIND_FILE,GOOGLEDRIVE_LIST_FILES, andGOOGLEDRIVE_DOWNLOAD_FILEinSKILL.mdretrieve file metadata and content.\n - Boundary markers: The instructions lack specific delimiters or "ignore" directives for the agent when processing retrieved data.\n
- Capability inventory: The skill provides access to operations such as
GOOGLEDRIVE_ADD_FILE_SHARING_PREFERENCE(permission management) andGOOGLEDRIVE_UPLOAD_FILEinSKILL.md.\n - Sanitization: No input validation or sanitization steps are defined for the data pulled from Google Drive.\n- [EXTERNAL_DOWNLOADS]: The skill requires connection to an external MCP server at
https://rube.app/mcp. This server provides the tool definitions and schemas that the agent executes at runtime.
Audit Metadata