google-drive-upload
Fail
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: HIGHDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill accesses a sensitive configuration file at
~/.cowork-gdrive-config.jsonto retrieve an API key and then transmits this secret along with file data to a remote URL using thecurlcommand. - [COMMAND_EXECUTION]: The skill executes multiple shell commands, including
cat,base64,file, andcurl, to read configuration data and transmit files to an external endpoint.
Recommendations
- AI detected serious security threats
Audit Metadata