Security audit

gtasks-cli

Security checks across malware telemetry and agentic risk

Overview

This appears to be a legitimate Google Tasks helper, but it needs review because it can act on an authenticated account and includes unsafe credential and deletion examples.

Install only if you are comfortable giving the agent access to your Google Tasks through gtasks. Do not print or share GTASKS_CLIENT_SECRET, protect token and export files, and require explicit confirmation before any delete, bulk-complete, or task-list change.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Rogue AgentSelf-Modification, Session Persistence
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Missing User Warnings

Medium

Confidence: 84% confidence
Finding: The skill documents destructive deletion commands for tasks and task lists without an explicit warning to confirm irreversibility before execution. In an agent setting, this increases the chance of unintended data loss if the skill is invoked on ambiguous or incomplete user requests.

Missing User Warnings

Low

Confidence: 70% confidence
Finding: The export examples write task data to local files without warning that potentially sensitive personal information will be persisted on disk. In shared or unmanaged environments, this can create unintended local data exposure beyond the Google Tasks account itself.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The test example includes a destructive cleanup command (`gtasks tasklists rm <<< "1"`) that deletes a task list without any nearby warning, confirmation guidance, or verification that list `1` is actually the temporary test list just created. In a task-management skill, users may copy this script directly, and if numbering changes or the wrong list is selected, legitimate data could be deleted unintentionally.

Missing User Warnings

Medium

Confidence: 96% confidence
Finding: The quick reference explicitly tells users to print `GTASKS_CLIENT_ID` and `GTASKS_CLIENT_SECRET` to the terminal. Displaying secrets on-screen can expose them to shoulder-surfing, terminal scrollback, shell recording, screenshots, CI logs, or shared session tooling, and this is unnecessary for most troubleshooting. In a skill intended for operational use, normalizing secret disclosure makes accidental credential leakage more likely.

Missing User Warnings

Low

Confidence: 82% confidence
Finding: The export examples encourage writing full task data to local JSON/CSV files without noting that task titles, notes, and due dates may contain sensitive personal or business information. While exporting is a legitimate feature, undocumented local persistence increases the chance that sensitive task data is left in insecure directories, synced folders, backups, or shared workspaces.

Session Persistence

Medium

Category: Rogue Agent
Content: --- name: gtasks-cli description: Manage Google Tasks from the command line - view, create, update, delete tasks and task lists. Use when the user asks to interact with Google Tasks, manage to-do items, create task lists, mark tasks complete, or check their Google Tasks. homepage: https://github.com/BRO3886/gtasks license: MIT compatibility: Requires gtasks CLI tool to be installed and authenticated
Confidence: 80% confidence
Finding: create task lists, mark tasks complete, or check their Google Tasks. homepage: https://github.com/BRO3886/gtasks license: MIT compatibility: Requires gtasks CLI tool to be installed and authenticated

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.