Security audit

google-drive

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Google Drive connector that uses Maton OAuth and gives clear approval rules for account connections and file-changing actions.

Before installing, be comfortable granting this skill access to the selected Google Drive account. Confirm every write, share, upload, delete, or new connection request, prefer OAuth over API keys, and avoid using the raw resumable upload URI path unless you have verified it came from the intended Google Drive upload session.

SkillSpector

By NVIDIA

Vulnerability Patterns

MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Intent-Code Divergence

Medium

Confidence: 86% confidence
Finding: The resumable upload example tells the user to PUT file bytes directly to an external upload URI rather than continuing through the documented gateway path. That creates an exception to the skill's own trust boundary and can cause agents to transmit data to a non-gateway endpoint without the usual policy checks, logging expectations, or host restrictions, especially if the upload URI is treated as untrusted data from a prior response.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.