google-drive
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to read and process content from Google Drive, which introduces a surface for indirect prompt injection if files contain malicious instructions.
- Ingestion points: External content enters the agent's context through the
/get-fileand/find-fileactions (file content and metadata). - Boundary markers: The instructions do not define delimiters or specific 'ignore' instructions for the data retrieved from Google Drive.
- Capability inventory: The skill possesses write capabilities, including folder and file creation (
/create-file,/create-folder). - Sanitization: There is no evidence of content sanitization or validation of the data retrieved from external files.
- [COMMAND_EXECUTION]: The skill executes the
orthcommand-line interface. These commands are directed towards the developer's official domain and represent standard functional implementation for this vendor's ecosystem.
Audit Metadata