gsuite-sdk@0.9.0

CAUTION

Publisher claims: "Work with Gmail, Google Calendar, Drive, Sheets, Tasks and Contacts, and read Search Console, Google Analytics 4 and Tag Manager, through the gsuite-sdk Python library and its `gsuite` CLI (JSON output for agents). Use it to read and send email, manage events, upload and share files, read and write spreadsheets, manage tasks and contacts, and pull search, traffic and tag data." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher pabloalaniz · joined 1 days agoInstalls 2,348Last detonated 5 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Outbound HTTP to raw IP addressreferences/rest-api.md:20 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

Outbound HTTP to raw IP addressreferences/rest-api.md:16 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

CRITICAL

Access to sensitive file pathsSKILL.md:35 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Outbound HTTP to raw IP addressreferences/rest-api.md:19 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

HIGH

URL with embedded credentialsreferences/rest-api.md:24 · URL with embedded credentials — may be phishing or credential leaking

AST07

HIGH

Outbound HTTP to raw IP addressreferences/rest-api.md:23 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

URL using raw IP addressreferences/rest-api.md:16 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressreferences/rest-api.md:19 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressreferences/rest-api.md:21 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressreferences/rest-api.md:20 · URL using raw IP address — may bypass domain-based filtering

AST07

MEDIUM

URL using raw IP addressreferences/rest-api.md:23 · URL using raw IP address — may bypass domain-based filtering

AST07

HIGH

Outbound HTTP to raw IP addressreferences/rest-api.md:21 · Outbound HTTP to raw IP address — may bypass domain-based monitoring

AST07

MEDIUM

File type combined with upload actionreferences/rest-api.md:46 · File type combined with upload action — agent may exfiltrate local data files

AST07