Borrowing it
Nothing to install: this file belongs to HydroChlorix/googledrive-mcp-server. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/HydroChlorix/googledrive-mcp-server/main/.agents/skills/test-googledrive-mcp/SKILL.mdgit clone --depth 1 https://github.com/HydroChlorix/googledrive-mcp-serverWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/hydrochlorix/googledrive-mcp-server/test-googledrive-mcp)<a href="https://agentmods.dev/skills/hydrochlorix/googledrive-mcp-server/test-googledrive-mcp"><img src="https://agentmods.dev/badge/skills/hydrochlorix/googledrive-mcp-server/test-googledrive-mcp/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/hydrochlorix/googledrive-mcp-server/test-googledrive-mcp"><img src="https://agentmods.dev/badge/skills/hydrochlorix/googledrive-mcp-server/test-googledrive-mcp.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00061 | $0.00931 |
| Opus 5 | $0.00030 | $0.00465 |
| Sonnet 5 | $0.00012 | $0.00186 |
| Haiku 4.5 | $0.00006 | $0.00093 |
Grade A, and why
test-googledrive-mcp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Goal:
Execute comprehensive automated verification and health testing on @hydrochlorix/googledrive-mcp-server. Supports targeting Core Drive APIs, Audit & Governance Dashboard, Operation Logger & Crash Reporter, or the Full Verification Suite (npm run test:all).
Workflow:
-
Target Scope Selection:
- Determine target scope from prompt parameters (
all[default],core,dashboard, orlogger):- Full Suite (
all): Runsnpm run test:all(Lint, Build, Unit/Integration tests, Audit Dashboard, Operation Logger, & CLI tests). - Core MCP (
core): Runsnpm testand native tool calls (drive_list_files,drive_upload_text_file,drive_download_file). - Audit Dashboard (
dashboard): Runsnpm run test:dashboard(REST/SSE APIs, Web UI HTML, Bearer Auth,--gen-tokenCLI). - Operation Logger (
logger): Runstests/operationLogger.test.ts(NDJSON logging, dual output tostderr, crash reporting, and secret sanitization).
- Full Suite (
- Determine target scope from prompt parameters (
-
Automated Test Suite Execution:
- Run
npm run test:all(or specific sub-suite). - Verify CLI Token Generator via
node dist/server.mjs --gen-token(assert exit 0 and 64-char hex token). - Assert all tests in Vitest pass (0 failures).
- Run
-
Direct Tool & E2E Verification (When Testing Core MCP Direct Calls):
- Perform sequential native tool verification:
drive_create_folder: Create folder<target>-<timestamp>.drive_list_files: Assert created folder is listed.drive_upload_text_file: Uploadhello-<timestamp>.txtand capturefileId.drive_download_file: Download file using capturedfileId.drive_download_file_from_url: Verify external URL downloading.
- Readonly Mode: Test
GOOGLE_DRIVE_MODE=readonly(write tools forbidden, read tools allowed).
- Perform sequential native tool verification:
-
Operation Logger & Sanitization Verification:
- File Existence: Assert
~/.mcp/logs/operation.logis created. - Format Validation: Assert file entries are valid NDJSON (one JSON object per line with
timestamp,level,message,pid,hostname). - Secret Redaction: Verify raw OAuth error payloads (
invalid_grant,invalid_rapt, tokens) are sanitized into clean summaries and safehintremediation steps.
- File Existence: Assert
-
Audit Dashboard & Security Verification:
- SPA Web UI (
GET /): HTTP 200 OK. - Security Enforcement: HTTP 401 Unauthorized on unauthenticated or invalid token requests.
- Authorized REST APIs: HTTP 200 OK for
GET /api/audit/logsandGET /api/audit/metrics. - Real-Time SSE Stream: HTTP 200 OK for
GET /api/audit/stream?token=<TOKEN>.
- SPA Web UI (
-
Final Summary Matrix & Readiness Verdict:
- Output test results matrix:
| Sub-System / Component | Test Suite / Target Route | Status | Details |
|---|---|---|---|
| Code Quality & Lint | npm run lint |
PASS / FAIL | Biome & Markdownlint passed |
| Production Build | npm run build |
PASS / FAIL | Vite bundle dist/server.mjs built |
| Core Unit/Integration | npm test |
PASS / FAIL | Vitest test suite passed |
| Operation Logger | tests/operationLogger.test.ts |
PASS / FAIL | NDJSON logging & secret sanitization verified |
| Audit Dashboard APIs | npm run test:dashboard |
PASS / FAIL | REST endpoints & SSE stream verified |
| CLI Token Generator | --gen-token |
PASS / FAIL | 64-char hex token generated |
| Direct Tool E2E Flow | drive_* tools |
PASS / FAIL | End-to-end folder/file lifecycle |
- Release Readiness Verdict: Clearly state Ready for Release: READY / NOT READY with details.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 57 lines · 61 tokens per session scan A 796d3b7c0e1a
test-googledrive-mcp is a skill published in the GitHub repository HydroChlorix/googledrive-mcp-server (1 stars, last pushed 28d ago), licensed MIT. It adds 61 tokens to every session and 931 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
research-engineer
An uncompromising Academic Research Engineer. Operates with absolute scientific rigor, objective criticism, and zero flair. Focuses on theoretical correctness, formal verification, and optimal implementation across any required technology.
tika-eval-compare
Compare extracts from two Tika builds over a corpus to detect regressions in content, encoding, exceptions, and embedded-document handling. Use for "compare before/after extracts", "eval this change against the corpus".
neuron-evaluation-engineer
Create and run AI evaluations with datasets, assertions, and output drivers in Neuron AI. Use this skill whenever the user mentions evaluation, testing AI systems, creating evaluators, dataset-driven testing, assertion-based validation, or wants to measure AI system performance. Also trigger for tasks involving…
jetson-validate-image
Use after jetson-flash-image to run static BSP checks, on-target smoke/regression tests on a flashed DUT, or both. Not for build or flash steps. Triggers: validate bsp, on-target validation.
atmos-validation
Validate Atmos projects, components, arbitrary JSON Schema inputs, EditorConfig, and GitHub Actions; use affected-file selection and native CI annotations.
skill-benchmark
Benchmark AI skill effectiveness by measuring implementation quality against legacy constraints.