googlesuper

Security Findings (387)

• HighAS-002

  ⚠️Excessive Permissions ×33

  tool declares network permission

  GOOGLESUPER_BATCH_RUN_REPORTSGOOGLESUPER_CREATE_ALBUMGOOGLESUPER_DISTANCE_MATRIX_APIGOOGLESUPER_DOWNLOAD_FILEGOOGLESUPER_FETCH_EMAILSGOOGLESUPER_FETCH_MESSAGE_BY_MESSAGE_IDGOOGLESUPER_FETCH_MESSAGE_BY_THREAD_IDGOOGLESUPER_FREE_BUSY_QUERYGOOGLESUPER_GEOCODING_APIGOOGLESUPER_GET_CONTACTSGOOGLESUPER_GET_DIRECTIONGOOGLESUPER_GET_MEDIA_ITEM_DOWNLOADGOOGLESUPER_INSERT_INLINE_IMAGEGOOGLESUPER_LIST_AUDIENCE_EXPORTSGOOGLESUPER_LIST_AUDIENCESGOOGLESUPER_LIST_HISTORYGOOGLESUPER_LIST_SEARCH_ADS360_LINKSGOOGLESUPER_LIST_TASK_LISTSGOOGLESUPER_MAPS_EMBED_APIGOOGLESUPER_NEARBY_SEARCHGOOGLESUPER_PARSE_FILEGOOGLESUPER_QUERY_AUDIENCE_EXPORTGOOGLESUPER_QUERY_AUDIENCE_LISTGOOGLESUPER_QUERY_TABLE

  tool declares exec permission

  GOOGLESUPER_CALENDARS_UPDATEGOOGLESUPER_CREATE_CUSTOMER_LISTGOOGLESUPER_CREATE_EVENTGOOGLESUPER_CREATE_FILEGOOGLESUPER_EXECUTE_SQLGOOGLESUPER_FETCH_EMAILSGOOGLESUPER_PATCH_CALENDARGOOGLESUPER_PATCH_EVENTGOOGLESUPER_QUERY_TABLE

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• HighAS-010

  🔑Insecure Secret Handling ×3

  input parameter "syncToken" appears to accept a secret or credential

  GOOGLESUPER_EVENTS_LISTGOOGLESUPER_LIST_CALENDARS

  input parameter "token" appears to accept a secret or credential

  GOOGLESUPER_EVENTS_WATCH

  Fix: Avoid accepting raw credentials as input parameters. Use secret managers (e.g. 1Password CLI, AWS Secrets Manager) and ensure credentials are never logged or stored in agent traces.

• MediumAS-002

  ⚠️Excessive Permissions ×95

  tool declares fs permission

  GOOGLESUPER_ADD_FILE_SHARING_PREFERENCEGOOGLESUPER_ADD_OR_REMOVE_TO_CUSTOMER_LISTGOOGLESUPER_BATCH_CREATE_MEDIA_ITEMSGOOGLESUPER_BATCH_DELETE_MESSAGESGOOGLESUPER_BATCH_UPDATEGOOGLESUPER_BATCH_UPDATE_VALUES_BY_DATA_FILTERGOOGLESUPER_CALENDAR_LIST_UPDATEGOOGLESUPER_CALENDARS_DELETEGOOGLESUPER_CALENDARS_UPDATEGOOGLESUPER_COPY_DOCUMENTGOOGLESUPER_COPY_FILEGOOGLESUPER_CREATE_ALBUMGOOGLESUPER_CREATE_AUDIENCE_EXPORTGOOGLESUPER_CREATE_AUDIENCE_LISTGOOGLESUPER_CREATE_CHARTGOOGLESUPER_CREATE_COMMENTGOOGLESUPER_CREATE_CUSTOMER_LISTGOOGLESUPER_CREATE_DOCUMENTGOOGLESUPER_CREATE_DOCUMENT_MARKDOWNGOOGLESUPER_CREATE_DRIVEGOOGLESUPER_CREATE_EMAIL_DRAFTGOOGLESUPER_CREATE_EVENTGOOGLESUPER_CREATE_EXPANDED_DATA_SETGOOGLESUPER_CREATE_FILEGOOGLESUPER_CREATE_FILE_FROM_TEXTGOOGLESUPER_CREATE_FOLDERGOOGLESUPER_CREATE_FOOTERGOOGLESUPER_CREATE_FOOTNOTEGOOGLESUPER_CREATE_GOOGLE_SHEET1GOOGLESUPER_CREATE_HEADERGOOGLESUPER_CREATE_LABELGOOGLESUPER_CREATE_MEETGOOGLESUPER_CREATE_NAMED_RANGEGOOGLESUPER_CREATE_PARAGRAPH_BULLETSGOOGLESUPER_CREATE_REPLYGOOGLESUPER_CREATE_ROLLUP_PROPERTYGOOGLESUPER_CREATE_SHORTCUT_TO_FILEGOOGLESUPER_CREATE_SPREADSHEET_COLUMNGOOGLESUPER_CREATE_SPREADSHEET_ROWGOOGLESUPER_CREATE_TASK_LISTGOOGLESUPER_DELETE_COMMENTGOOGLESUPER_DELETE_CONTENT_RANGEGOOGLESUPER_DELETE_DIMENSIONGOOGLESUPER_DELETE_DRAFTGOOGLESUPER_DELETE_DRIVEGOOGLESUPER_DELETE_EVENTGOOGLESUPER_DELETE_FOOTERGOOGLESUPER_DELETE_HEADERGOOGLESUPER_DELETE_MESSAGEGOOGLESUPER_DELETE_NAMED_RANGEGOOGLESUPER_DELETE_PARAGRAPH_BULLETSGOOGLESUPER_DELETE_PERMISSIONGOOGLESUPER_DELETE_REPLYGOOGLESUPER_DELETE_SHEETGOOGLESUPER_DELETE_TABLEGOOGLESUPER_DELETE_TABLE_COLUMNGOOGLESUPER_DELETE_TABLE_ROWGOOGLESUPER_DELETE_TASKGOOGLESUPER_DELETE_TASK_LISTGOOGLESUPER_DOWNLOAD_FILEGOOGLESUPER_EDIT_FILEGOOGLESUPER_EMPTY_TRASHGOOGLESUPER_FILES_MODIFY_LABELSGOOGLESUPER_FIND_FILEGOOGLESUPER_FIND_FOLDERGOOGLESUPER_GENERATE_IDSGOOGLESUPER_GET_ATTACHMENTGOOGLESUPER_GET_CHANGES_START_PAGE_TOKENGOOGLESUPER_GET_COMMENTGOOGLESUPER_GET_FILE_METADATAGOOGLESUPER_GET_MEDIA_ITEM_DOWNLOADGOOGLESUPER_GET_PERMISSIONGOOGLESUPER_GET_PROFILEGOOGLESUPER_GET_REPLYGOOGLESUPER_GET_REVISIONGOOGLESUPER_GOOGLE_DRIVE_DELETE_FOLDER_OR_FILE_ACTIONGOOGLESUPER_LIST_CHANGESGOOGLESUPER_LIST_COMMENTSGOOGLESUPER_LIST_FILE_LABELSGOOGLESUPER_LIST_FILESGOOGLESUPER_LIST_PERMISSIONSGOOGLESUPER_LIST_REPLIES_TO_COMMENTGOOGLESUPER_LIST_REVISIONSGOOGLESUPER_MAPS_EMBED_APIGOOGLESUPER_MOVE_FILEGOOGLESUPER_PARSE_FILEGOOGLESUPER_REMOVE_ATTENDEE

  tool declares db permission

  GOOGLESUPER_EXECUTE_SQLGOOGLESUPER_FIND_EVENTGOOGLESUPER_GET_CAMPAIGN_BY_NAMEGOOGLESUPER_GET_TABLE_SCHEMAGOOGLESUPER_LOOKUP_SPREADSHEET_ROWGOOGLESUPER_QUERY_AUDIENCE_EXPORTGOOGLESUPER_QUERY_AUDIENCE_LISTGOOGLESUPER_QUERY_TABLE

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• LowAS-002

  ⚠️Excessive Permissions ×22

  tool declares http permission

  GOOGLESUPER_BATCH_MODIFY_MESSAGESGOOGLESUPER_CREATE_EMAIL_DRAFTGOOGLESUPER_EVENTS_WATCHGOOGLESUPER_EXECUTE_SQLGOOGLESUPER_FETCH_EMAILSGOOGLESUPER_MAPS_EMBED_APIGOOGLESUPER_NEARBY_SEARCH

  input schema exposes 13 properties (threshold: 10)

  GOOGLESUPER_CREATE_CHARTGOOGLESUPER_DISTANCE_MATRIX_APIGOOGLESUPER_FIND_FILEGOOGLESUPER_LIST_FILES

  input schema exposes 23 properties (threshold: 10)

  GOOGLESUPER_CREATE_EVENT

  input schema exposes 19 properties (threshold: 10)

  GOOGLESUPER_EVENTS_LIST

  input schema exposes 11 properties (threshold: 10)

  GOOGLESUPER_FIND_EVENTGOOGLESUPER_GEOCODING_APIGOOGLESUPER_GET_ROUTEGOOGLESUPER_LIST_CHANGESGOOGLESUPER_LIST_TASKSGOOGLESUPER_PATCH_TASK

  input schema exposes 15 properties (threshold: 10)

  GOOGLESUPER_FORMAT_CELL

  input schema exposes 12 properties (threshold: 10)

  GOOGLESUPER_INSERT_TASK

  input schema exposes 14 properties (threshold: 10)

  GOOGLESUPER_PATCH_EVENT

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×34

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  GOOGLESUPER_BATCH_MODIFY_MESSAGESGOOGLESUPER_BATCH_RUN_REPORTSGOOGLESUPER_CALENDARS_UPDATEGOOGLESUPER_CREATE_ALBUMGOOGLESUPER_CREATE_CUSTOMER_LISTGOOGLESUPER_CREATE_EMAIL_DRAFTGOOGLESUPER_CREATE_EVENTGOOGLESUPER_CREATE_FILEGOOGLESUPER_DISTANCE_MATRIX_APIGOOGLESUPER_DOWNLOAD_FILEGOOGLESUPER_EVENTS_WATCHGOOGLESUPER_EXECUTE_SQLGOOGLESUPER_FETCH_EMAILSGOOGLESUPER_FETCH_MESSAGE_BY_MESSAGE_IDGOOGLESUPER_FETCH_MESSAGE_BY_THREAD_IDGOOGLESUPER_FREE_BUSY_QUERYGOOGLESUPER_GEOCODING_APIGOOGLESUPER_GET_CONTACTSGOOGLESUPER_GET_DIRECTIONGOOGLESUPER_GET_MEDIA_ITEM_DOWNLOADGOOGLESUPER_INSERT_INLINE_IMAGEGOOGLESUPER_LIST_AUDIENCE_EXPORTSGOOGLESUPER_LIST_AUDIENCESGOOGLESUPER_LIST_HISTORYGOOGLESUPER_LIST_SEARCH_ADS360_LINKSGOOGLESUPER_LIST_TASK_LISTSGOOGLESUPER_MAPS_EMBED_APIGOOGLESUPER_NEARBY_SEARCHGOOGLESUPER_PARSE_FILEGOOGLESUPER_PATCH_CALENDARGOOGLESUPER_PATCH_EVENTGOOGLESUPER_QUERY_AUDIENCE_EXPORTGOOGLESUPER_QUERY_AUDIENCE_LISTGOOGLESUPER_QUERY_TABLE

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×200

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  GOOGLESUPER_ACL_PATCHGOOGLESUPER_ADD_ENRICHMENTGOOGLESUPER_ADD_FILE_SHARING_PREFERENCEGOOGLESUPER_ADD_LABEL_TO_EMAILGOOGLESUPER_ADD_OR_REMOVE_TO_CUSTOMER_LISTGOOGLESUPER_ADD_SHEETGOOGLESUPER_AGGREGATE_COLUMN_DATAGOOGLESUPER_APPEND_DIMENSIONGOOGLESUPER_BATCH_ADD_MEDIA_ITEMSGOOGLESUPER_BATCH_CREATE_MEDIA_ITEMSGOOGLESUPER_BATCH_DELETE_MESSAGESGOOGLESUPER_BATCH_GETGOOGLESUPER_BATCH_GET_MEDIA_ITEMSGOOGLESUPER_BATCH_MODIFY_MESSAGESGOOGLESUPER_BATCH_RUN_REPORTSGOOGLESUPER_BATCH_UPDATEGOOGLESUPER_BATCH_UPDATE_VALUES_BY_DATA_FILTERGOOGLESUPER_CALENDAR_LIST_INSERTGOOGLESUPER_CALENDAR_LIST_UPDATEGOOGLESUPER_CALENDARS_DELETEGOOGLESUPER_CALENDARS_UPDATEGOOGLESUPER_CHECK_COMPATIBILITYGOOGLESUPER_CLEAR_BASIC_FILTERGOOGLESUPER_CLEAR_CALENDARGOOGLESUPER_CLEAR_TASKSGOOGLESUPER_CLEAR_VALUESGOOGLESUPER_COMPUTE_ROUTE_MATRIXGOOGLESUPER_COPY_DOCUMENTGOOGLESUPER_COPY_FILEGOOGLESUPER_CREATE_ALBUMGOOGLESUPER_CREATE_AUDIENCE_EXPORTGOOGLESUPER_CREATE_AUDIENCE_LISTGOOGLESUPER_CREATE_CHARTGOOGLESUPER_CREATE_COMMENTGOOGLESUPER_CREATE_CUSTOMER_LISTGOOGLESUPER_CREATE_DOCUMENTGOOGLESUPER_CREATE_DOCUMENT_MARKDOWNGOOGLESUPER_CREATE_DRIVEGOOGLESUPER_CREATE_EMAIL_DRAFTGOOGLESUPER_CREATE_EVENTGOOGLESUPER_CREATE_EXPANDED_DATA_SETGOOGLESUPER_CREATE_FILEGOOGLESUPER_CREATE_FILE_FROM_TEXTGOOGLESUPER_CREATE_FOLDERGOOGLESUPER_CREATE_FOOTERGOOGLESUPER_CREATE_FOOTNOTEGOOGLESUPER_CREATE_GOOGLE_SHEET1GOOGLESUPER_CREATE_HEADERGOOGLESUPER_CREATE_LABELGOOGLESUPER_CREATE_MEETGOOGLESUPER_CREATE_NAMED_RANGEGOOGLESUPER_CREATE_PARAGRAPH_BULLETSGOOGLESUPER_CREATE_REPLYGOOGLESUPER_CREATE_ROLLUP_PROPERTYGOOGLESUPER_CREATE_SHORTCUT_TO_FILEGOOGLESUPER_CREATE_SPREADSHEET_COLUMNGOOGLESUPER_CREATE_SPREADSHEET_ROWGOOGLESUPER_CREATE_TASK_LISTGOOGLESUPER_DELETE_COMMENTGOOGLESUPER_DELETE_CONTENT_RANGEGOOGLESUPER_DELETE_DIMENSIONGOOGLESUPER_DELETE_DRAFTGOOGLESUPER_DELETE_DRIVEGOOGLESUPER_DELETE_EVENTGOOGLESUPER_DELETE_FOOTERGOOGLESUPER_DELETE_HEADERGOOGLESUPER_DELETE_MESSAGEGOOGLESUPER_DELETE_NAMED_RANGEGOOGLESUPER_DELETE_PARAGRAPH_BULLETSGOOGLESUPER_DELETE_PERMISSIONGOOGLESUPER_DELETE_REPLYGOOGLESUPER_DELETE_SHEETGOOGLESUPER_DELETE_TABLEGOOGLESUPER_DELETE_TABLE_COLUMNGOOGLESUPER_DELETE_TABLE_ROWGOOGLESUPER_DELETE_TASKGOOGLESUPER_DELETE_TASK_LISTGOOGLESUPER_DISTANCE_MATRIX_APIGOOGLESUPER_DOWNLOAD_FILEGOOGLESUPER_DUPLICATE_CALENDARGOOGLESUPER_EDIT_FILEGOOGLESUPER_EMPTY_TRASHGOOGLESUPER_EVENTS_INSTANCESGOOGLESUPER_EVENTS_LISTGOOGLESUPER_EVENTS_MOVEGOOGLESUPER_EVENTS_WATCHGOOGLESUPER_EXECUTE_SQLGOOGLESUPER_FETCH_EMAILSGOOGLESUPER_FETCH_MESSAGE_BY_MESSAGE_IDGOOGLESUPER_FETCH_MESSAGE_BY_THREAD_IDGOOGLESUPER_FILES_MODIFY_LABELSGOOGLESUPER_FIND_EVENTGOOGLESUPER_FIND_FILEGOOGLESUPER_FIND_FOLDERGOOGLESUPER_FIND_FREE_SLOTSGOOGLESUPER_FIND_REPLACEGOOGLESUPER_FIND_WORKSHEET_BY_TITLEGOOGLESUPER_FORMAT_CELLGOOGLESUPER_FORWARD_MESSAGEGOOGLESUPER_FREE_BUSY_QUERYGOOGLESUPER_GENERATE_IDSGOOGLESUPER_GEOCODING_APIGOOGLESUPER_GET_ABOUTGOOGLESUPER_GET_ACCOUNTGOOGLESUPER_GET_ALBUMGOOGLESUPER_GET_ATTACHMENTGOOGLESUPER_GET_AUDIENCE_EXPORTGOOGLESUPER_GET_AUDIENCE_LISTGOOGLESUPER_GET_CALENDARGOOGLESUPER_GET_CAMPAIGN_BY_IDGOOGLESUPER_GET_CAMPAIGN_BY_NAMEGOOGLESUPER_GET_CHANGES_START_PAGE_TOKENGOOGLESUPER_GET_CHARTS_FROM_SPREADSHEETGOOGLESUPER_GET_COMMENTGOOGLESUPER_GET_CONFERENCE_RECORD_FOR_MEETGOOGLESUPER_GET_CONTACTSGOOGLESUPER_GET_CURRENT_DATE_TIMEGOOGLESUPER_GET_CUSTOMER_LISTSGOOGLESUPER_GET_DIRECTIONGOOGLESUPER_GET_DOCUMENT_BY_IDGOOGLESUPER_GET_DRIVEGOOGLESUPER_GET_FILE_METADATAGOOGLESUPER_GET_KEY_EVENTGOOGLESUPER_GET_MEDIA_ITEM_DOWNLOADGOOGLESUPER_GET_MEETGOOGLESUPER_GET_METADATAGOOGLESUPER_GET_PARTICIPANT_SESSIONGOOGLESUPER_GET_PEOPLEGOOGLESUPER_GET_PERMISSIONGOOGLESUPER_GET_PROFILEGOOGLESUPER_GET_PROPERTY_QUOTAS_SNAPSHOTGOOGLESUPER_GET_RECORDINGS_BY_CONFERENCE_RECORD_IDGOOGLESUPER_GET_REPLYGOOGLESUPER_GET_REVISIONGOOGLESUPER_GET_ROUTEGOOGLESUPER_GET_SHEET_NAMESGOOGLESUPER_GET_SPREADSHEET_BY_DATA_FILTERGOOGLESUPER_GET_SPREADSHEET_INFOGOOGLESUPER_GET_TABLE_SCHEMAGOOGLESUPER_GET_TASKGOOGLESUPER_GET_TASK_LISTGOOGLESUPER_GET_TRANSCRIPTS_BY_CONFERENCE_RECORD_IDGOOGLESUPER_GOOGLE_DRIVE_DELETE_FOLDER_OR_FILE_ACTIONGOOGLESUPER_HIDE_DRIVEGOOGLESUPER_INSERT_DIMENSIONGOOGLESUPER_INSERT_INLINE_IMAGEGOOGLESUPER_INSERT_PAGE_BREAKGOOGLESUPER_INSERT_TABLE_ACTIONGOOGLESUPER_INSERT_TABLE_COLUMNGOOGLESUPER_INSERT_TASKGOOGLESUPER_INSERT_TEXT_ACTIONGOOGLESUPER_LIST_ACCOUNTSGOOGLESUPER_LIST_ACL_RULESGOOGLESUPER_LIST_ALBUMSGOOGLESUPER_LIST_AUDIENCE_EXPORTSGOOGLESUPER_LIST_AUDIENCE_LISTSGOOGLESUPER_LIST_AUDIENCESGOOGLESUPER_LIST_CALENDARSGOOGLESUPER_LIST_CHANGESGOOGLESUPER_LIST_COMMENTSGOOGLESUPER_LIST_CONFERENCE_RECORDSGOOGLESUPER_LIST_DRAFTSGOOGLESUPER_LIST_FILE_LABELSGOOGLESUPER_LIST_FILESGOOGLESUPER_LIST_HISTORYGOOGLESUPER_LIST_KEY_EVENTSGOOGLESUPER_LIST_LABELSGOOGLESUPER_LIST_MEDIA_ITEMSGOOGLESUPER_LIST_PARTICIPANT_SESSIONSGOOGLESUPER_LIST_PERMISSIONSGOOGLESUPER_LIST_PROPERTIESGOOGLESUPER_LIST_REPLIES_TO_COMMENTGOOGLESUPER_LIST_REPORTING_DATA_ANNOTATIONSGOOGLESUPER_LIST_REVISIONSGOOGLESUPER_LIST_ROLLUP_PROPERTIESGOOGLESUPER_LIST_SEARCH_ADS360_LINKSGOOGLESUPER_LIST_SHARED_DRIVESGOOGLESUPER_LIST_SPREADSHEET_CHARTS_ACTIONGOOGLESUPER_LIST_TABLESGOOGLESUPER_LIST_TASK_LISTSGOOGLESUPER_LIST_TASKSGOOGLESUPER_LIST_THREADSGOOGLESUPER_LOOKUP_SPREADSHEET_ROWGOOGLESUPER_MAPS_EMBED_APIGOOGLESUPER_MODIFY_THREAD_LABELSGOOGLESUPER_MOVE_FILEGOOGLESUPER_MOVE_TASKGOOGLESUPER_MOVE_TO_TRASHGOOGLESUPER_NEARBY_SEARCHGOOGLESUPER_PARSE_FILEGOOGLESUPER_PATCH_CALENDARGOOGLESUPER_PATCH_EVENTGOOGLESUPER_PATCH_LABELGOOGLESUPER_PATCH_TASKGOOGLESUPER_PATCH_TASK_LISTGOOGLESUPER_QUERY_AUDIENCE_EXPORTGOOGLESUPER_QUERY_AUDIENCE_LISTGOOGLESUPER_QUERY_TABLEGOOGLESUPER_QUICK_ADDGOOGLESUPER_REMOVE_ATTENDEE

  Fix: Review and remediate the identified issue.