md-to-gdoc
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script executes the
gogcommand-line utility andpython3for processing Google Docs creation and content updates. - [EXTERNAL_DOWNLOADS]: The skill references the
gogCLI tool located at the author's official GitHub repository (github.com/tychohq/gog). - [INDIRECT_PROMPT_INJECTION]: The skill processes external markdown data.
- Ingestion points: The content of the user-provided markdown file (
MD_FILE) inscripts/md-to-gdoc.sh. - Boundary markers: None identified in the prompt or script.
- Capability inventory: Uses the
gogCLI for network operations (Google Workspace API) andpython3for JSON parsing. - Sanitization: Content is passed directly to the
gogCLI without sanitization, which is expected for a document conversion utility.
Audit Metadata