gog
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
gogCLI tool through a third-party Homebrew repository (steipete/tap/gogcli). - [COMMAND_EXECUTION]: The skill's core functionality is built upon executing shell commands via the
gogbinary to interact with Google APIs. - [PROMPT_INJECTION]: The skill processes untrusted external data from Gmail, Drive, and Google Docs, which creates a surface for indirect prompt injection.
- Ingestion points: Search results and content from Gmail, Drive, Sheets, and Docs in SKILL.md.
- Boundary markers: None identified in the provided instructions.
- Capability inventory: Subprocess execution via
gogfor sending emails, modifying spreadsheets, and writing to the local filesystem. - Sanitization: No explicit data sanitization or escaping mechanisms are documented.
Audit Metadata