google-docs-automation

Pass

Audited by Gen Agent Trust Hub on Feb 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill demonstrates secure authentication patterns by mandating the use of Service Account credentials rather than user-based OAuth, reducing the risk of personal account exposure.
  • [SAFE]: Credential management is handled through environment variables (os.getenv) and .env files. The skill includes a 'Security Checklist' that explicitly instructs users to add these files to .gitignore to prevent secret leakage in version control.
  • [SAFE]: The code patterns utilize well-known and trusted official libraries for Google API integration, specifically gspread and google-api-python-client.
  • [SAFE]: The skill includes robust error handling patterns, encouraging the use of specific exception catching (e.g., SpreadsheetNotFound, HttpError) to prevent information leakage through generic error traces.
  • [SAFE]: The skill promotes the Principle of Least Privilege by instructing users to request only the minimum required scopes for their automation tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 24, 2026, 04:55 AM