gog-sheets
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from Google Sheets, which acts as an untrusted external source.
- Ingestion points: The skill retrieves spreadsheet content using the
gog sheets getcommand as described inSKILL.md. - Boundary markers: The documentation explicitly recommends the use of the
--wrap-untrustedflag to help the agent identify and delimit external content. - Capability inventory: The tool possesses significant capabilities to modify or delete data, including
update,append,batch-update, anddelete-tabcommands listed inSKILL.md. - Sanitization: The recommended
--wrap-untrustedflag serves as a sanitization mechanism to prevent the agent from misinterpreting spreadsheet content as direct instructions.
Audit Metadata