google-drive — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited google-drive (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Interact with Google Drive: list files, upload, download, create folders, manage sharing, and recover media from public shared Drive folders for analysis or social publishing.
| Folder | ID | Purpose |
|---|---|---|
| CURRENT | 1SfLKzSCFsFWaCUl63_L9GtJWMIKSWTyO | Active client projects (Weblyfe) |
GOOGLE_CLIENT_ID=your-client-id
GOOGLE_CLIENT_SECRET=your-client-secret
# OAuth token obtained via OAuth flow
GOOGLE_ACCESS_TOKEN=your-access-token
GOOGLE_REFRESH_TOKEN=your-refresh-tokengdrive list --folder "Appie Backups"gdrive upload /path/to/file.txt --name "backup.txt" --folder "Appie Backups"gdrive download <file-id> --output /path/to/save.txtgdrive mkdir "New Folder" --parent "parent-folder-id"When the user asks whether Drive access is available, do not rely on stored account presence alone. First run a real read-only Drive probe with gog drive ls --account [email protected] --json --no-input and inspect gog auth list --json for scopes. See references/oauth-drive-access-check.md for the exact check sequence and safe reporting pattern.
gogFor private Drive/Docs/Sheets access on Appie-2, use references/gog-oauth-drive.md. Key points: gog stores config/tokens under /root/.config/gogcli/; verify with gog drive ls --account [email protected]; if tokens are expired or revoked, use the remote two-step OAuth flow and never echo auth codes or token contents.
If Drive OAuth fails with invalid_grant, 401, or missing scopes but the user gave a public folder link, do not stop immediately. Use references/public-shared-folder-video-download.md:
https://drive.usercontent.google.com/download with id, export=download, confirm=t, and uuid.ffprobe before analysis or publishing.api/google-drive.jsconst drive = require('./api/google-drive.js');
// List files
const files = await drive.listFiles({ folderId: 'xxx' });
// Upload
await drive.uploadFile('/path/to/file.txt', { name: 'file.txt', folderId: 'xxx' });
// Download
await drive.downloadFile('file-id', '/path/to/save.txt');
// Search
const results = await drive.searchFiles('query string');When the user asks to move or copy batches of videos/assets between Drive folders, use references/folder-to-folder-media-copy.md. Prefer gog drive copy for Drive-native file copies, inventory source/destination first, skip exact-name duplicates, then verify count, missing files, and binary size matches before reporting.
| Use Case | Implementation |
|---|---|
| Auto-backup | Appie → Drive → Daily backup folder |
| File sharing | Generate share links |
| Public video intake | Parse public folder HTML and use the large-file interstitial flow; see references/public-shared-folder-video-download.md |
| Folder-to-folder media transfer | Copy accessible Drive media with gog drive copy; see references/folder-to-folder-media-copy.md |
| Document sync | Sync local files to Drive |
| Team folders | Create organized folder structure |
drive.usercontent.google.com/download~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.