Trust Assessment
ai-boss-assistant received a trust score of 72/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.
SkillShield's automated analysis identified 1 finding: 1 critical, 0 high, 0 medium, and 0 low severity. Key findings include Unverified external tool requests broad Google Workspace access.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings1
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| CRITICAL | Unverified external tool requests broad Google Workspace access The skill instructs users to install and use an unpinned, globally installed `npm` package named `gog` to authenticate with Google Workspace. This tool then requests broad permissions for Gmail, Calendar, and Drive. This poses multiple critical risks:
1. **Supply Chain**: An unpinned global dependency means a future malicious or compromised version of `gog` could be installed, leading to arbitrary code execution.
2. **Credential Harvesting**: If `gog` is malicious, it could harvest sensitive Google OAuth tokens or credentials during the `auth login` process.
3. **Excessive Permissions**: The tool requests extensive access to user's email, calendar, and drive data. While necessary for functionality, relying on an unverified external tool for such broad access is highly risky. 1. **Verify `gog`**: Thoroughly vet the `gog` package's source code, maintainers, and security posture. 2. **Pin dependency**: If `gog` is deemed trustworthy, pin its version (e.g., `npm install -g gog@1.2.3`) to mitigate future supply chain attacks. 3. **Alternative authentication**: Explore using official Google APIs directly or well-established, audited libraries for Google Workspace integration, rather than a third-party CLI tool. 4. **Least Privilege**: Ensure the requested permissions are strictly necessary and consider granular permissions if possible. 5. **User Warning**: Clearly inform users about the risks associated with installing and authenticating with external tools and the broad permissions requested. | LLM | SKILL.md:68 |
Scan History
Embed Code
[](https://skillshield.io/report/4ef1afe52c1f428f)
Powered by SkillShield