Google Docs Log Automation — Append log lines to auto-created daily documents in Google Drive by PortEden Secure Access.

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:23 PM UTC
• Version:
  1.0.0

Overview

This skill is a straightforward Google Docs logging helper, but users should be careful not to send sensitive log contents to cloud documents.

Install only if you want agent logs stored in Google Docs. Keep PE_Logs private, use the right PortEden/Google account, and avoid logging secrets, credentials, customer data, internal URLs, or sensitive session details. Periodically delete old log documents if they are no longer needed.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Rogue Agent: Self-Modification, Session Persistence
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill directs agents to append arbitrary log lines to Google Docs/Drive, a third-party cloud service, but does not warn against including secrets, personal data, access tokens, internal URLs, or other sensitive operational content. In an agent setting, logs often contain confidential runtime data, so this omission creates a realistic risk of unintended data exfiltration to an external provider.

Session Persistence

Medium

• Category: Rogue Agent

Content

# porteden docs-logger

Append log lines to daily Google Docs — one document per day, auto-created inside a `PE_Logs` folder. Works like a cloud-native `.txt` log file that agents can write to from anywhere. **Use `-jc` flags** for AI-optimized output.

If `porteden` is not installed: `brew install porteden/tap/porteden` (or `go install github.com/porteden/cli/cmd/porteden@latest`).

• Confidence: 88% confidence
• Finding: write to from anywhere. **Use `-jc` flags** for AI-optimized output. If `porteden` is not installed: `brew install porteden/tap/porteden` (or `go install github.com/porteden/cli/cmd/porteden@latest`)

VirusTotal

66/66 vendors flagged this skill as clean.