gog
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
gogutility using a Homebrew tap (steipete/tap/gogcli). This is a standard installation method for the tool. - [COMMAND_EXECUTION]: The skill executes commands through the
gogbinary to interact with Google Workspace APIs. - [DATA_EXFILTRATION]: The skill is designed to access and manage sensitive user data (emails, files, contacts) within Google Workspace. This behavior is the primary intended purpose of the skill and requires explicit OAuth authorization by the user.
- [PROMPT_INJECTION]:
- Ingestion points: Reads content from Gmail, Drive, Calendar, and other Google services where untrusted data may reside (
SKILL.md). - Boundary markers: None identified; external content is processed as-is.
- Capability inventory: Executes
gogcommands to read and write data across Google Workspace (SKILL.md). - Sanitization: No specific sanitization of the retrieved data is mentioned in the skill instructions.
Audit Metadata