add-gchat
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches adapter source code files (gchat.ts and a registration test) from a git branch named 'channels'.
- [EXTERNAL_DOWNLOADS]: It installs the '@chat-adapter/gchat' package at version 4.29.0 using the pnpm package manager.
- [COMMAND_EXECUTION]: The skill executes build and test commands ('pnpm run build' and 'pnpm exec vitest') to verify the installation and integration.
- [COMMAND_EXECUTION]: The removal instructions include the use of shell commands ('rm') and platform-specific service management tools ('launchctl' or 'systemctl') for cleanup.
- [DATA_EXPOSURE_&_EXFILTRATION]: The skill prompts the user for sensitive Google Service Account credentials. These are stored in a '.env' file, which is recognized as a standard and safe practice for local secret management in development environments.
Audit Metadata