md-to-gdoc

Pass

Audited by Gen Agent Trust Hub on May 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs its stated purpose of converting Markdown files to Google Docs using a dedicated CLI tool and standard shell utilities.
  • [COMMAND_EXECUTION]: The Bash script scripts/md-to-gdoc.sh executes shell commands including grep, sed, and python3. These commands are used for input validation, string manipulation, and JSON parsing of CLI output, which are standard practices for this type of utility.
  • [EXTERNAL_DOWNLOADS]: The skill documentation references an external tool, 'gog', hosted on GitHub. This tool is authored by the same entity as the skill ('tychohq') and is required for the skill's core functionality.
  • [DATA_EXFILTRATION]: While the skill interacts with Google Workspace APIs via the 'gog' CLI, this is the intended purpose of the skill (uploading documents to a user-specified account). No unauthorized data exfiltration patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
May 3, 2026, 01:32 AM