gtasks-cli

• Analyzed: May 12, 2026, 3:26 AM
• Findings: 1
• Version: 1.0.2
• Hash: 2c21571b2c6d6560c78a56782bdca9c848052818cde8511bfcde1f8071ab4610
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is designed to manage Google Tasks via the `gtasks` CLI tool. It requires Google OAuth2 credentials and an authentication token, which are handled with recommended security practices (e.g., `chmod 600` for the token file, using environment variables). The `SKILL.md` provides benign instructions for the AI agent to perform diagnostic checks (gtasks installation, environment variables, authentication status) before execution. The `references/ADVANCED.md` file offers legitimate shell scripting examples for automation and integration, using standard Unix tools like `jq` and `xargs`, and explicitly advises on security best practices. There is no evidence of intentional harmful behavior, data exfiltration, unauthorized remote control, or prompt injection designed to subvert the agent's core function.