google-drive-upload

Fail

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: HIGHDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill accesses a sensitive configuration file at ~/.cowork-gdrive-config.json to retrieve an API key and then transmits this secret along with file data to a remote URL using the curl command.
  • [COMMAND_EXECUTION]: The skill executes multiple shell commands, including cat, base64, file, and curl, to read configuration data and transmit files to an external endpoint.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jul 18, 2026, 04:24 PM
Security Audit — agent-trust-hub — google-drive-upload