md-to-gdoc

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The script executes the gog command-line utility and python3 for processing Google Docs creation and content updates.
  • [EXTERNAL_DOWNLOADS]: The skill references the gog CLI tool located at the author's official GitHub repository (github.com/tychohq/gog).
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external markdown data.
  • Ingestion points: The content of the user-provided markdown file (MD_FILE) in scripts/md-to-gdoc.sh.
  • Boundary markers: None identified in the prompt or script.
  • Capability inventory: Uses the gog CLI for network operations (Google Workspace API) and python3 for JSON parsing.
  • Sanitization: Content is passed directly to the gog CLI without sanitization, which is expected for a document conversion utility.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 06:38 AM