gas-clasp-ops

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The Python script scripts/clasp_ops.py executes the clasp command-line utility to interact with Google Apps Script projects. The script safely constructs command arguments as a list and validates function names using a regular expression (r"^[a-zA-Z_][a-zA-Z0-9_]*$"), effectively preventing command injection attacks.
  • [EXTERNAL_DOWNLOADS]: The skill documentation recommends using npx to run the @google/clasp package. This is the official tool maintained by Google for local Apps Script development and is retrieved from the standard npm registry.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 05:59 AM
Security Audit — agent-trust-hub — gas-clasp-ops