ClawHub
Back to skill

Security audit

Google Workspace Toolkit Free

Security checks across malware telemetry and agentic risk

Overview

This skill is a Google Workspace command wrapper, but it asks for broad account access with persistent local OAuth credentials and an unpinned external runtime that is not clearly scoped.

Review this before installing: it may authorize an external command-line tool to read and modify Gmail, Calendar, and Drive data, store reusable OAuth credentials locally, and write Drive files to local paths. Use it only on a trusted single-user machine, verify the npm package source before installation, prefer limited OAuth scopes if offered, and clear/revoke credentials when done.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
81% confidence
Finding
The skill is designed to access highly sensitive Gmail, Calendar, and Drive data, yet the introductory description omits an explicit warning that OAuth tokens will be stored locally and that the tool may read or modify personal workspace content. In this context, missing security disclosure increases the chance that users authorize broad access without understanding local credential persistence and data sensitivity.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The skill advertises Drive file download to arbitrary local paths without warning about the risks of writing sensitive cloud content onto the local filesystem. In an agent setting, this can lead to unintended data exposure, overwriting files, or placement of confidential documents in insecure locations if users are not clearly warned.

Credential Access

High
Category
Privilege Escalation
Content
### API Key 配置

- 无需创建 Google Cloud 项目
- 无需创建 OAuth 凭据或下载 client_secret.json
- 首次使用时通过浏览器完成 Google OAuth 授权
- 凭据自动存储于 `~/.config/google-workspace-toolkit/` 目录
Confidence
88% confidence
Finding
secret.json

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Static analysis

No suspicious patterns detected.