google-drive-automation
Fail
Audited by Snyk on Jul 31, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E005: Suspicious download URL detected in skill instructions.
- Suspicious download URL detected (high risk: 1.00). Both URLs are Google Drive links (personal file hosting) which are commonly used to distribute executables or obscure malicious payloads and therefore represent a high-risk download source.
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). In the Google Drive skill, the required runtime path
scripts/drive.py search(including full-text search and URL/drive query pass-through) can ingest outsider-authored text from search-matched Drive files/folders the user has access to, depending on what the outsider posted into those files.
Issues (2)
E005
CRITICALSuspicious download URL detected in skill instructions.
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata