Wrap fetched content in untrusted output markers

.agents/skills/gog/SKILL.md

@@ -21,11 +21,11 @@ gog schema --json
 Pick the account explicitly for API work:
 
 ```bash
-gog --account user@example.com gmail search 'newer_than:7d' --json
+gog --account user@example.com gmail search 'newer_than:7d' --json --wrap-untrusted
 ```
 
-Prefer `--json` or `--plain` for agent parsing. Human hints and progress should
-stay on stderr; stdout is for data.
+Prefer `--json --wrap-untrusted` for agent parsing when reading Google content.
+Human hints and progress should stay on stderr; stdout is for data.
 
 ## Safety Rules
 
@@ -86,15 +86,15 @@ the shell, fix the service or agent environment before reauthenticating.
 ## Common Reads
 
 ```bash
-gog --account user@example.com gmail search 'newer_than:3d' --max 10 --json
-gog --account user@example.com gmail get <messageId> --sanitize-content --json
-gog --account user@example.com gmail thread get <threadId> --sanitize-content --json
-
-gog --account user@example.com calendar events --today --json
-gog --account user@example.com drive ls --max 20 --json
-gog --account user@example.com docs cat <documentId> --json
-gog --account user@example.com sheets get <spreadsheetId> Sheet1!A1:D20 --json
-gog --account user@example.com contacts list --max 20 --json
+gog --account user@example.com gmail search 'newer_than:3d' --max 10 --json --wrap-untrusted
+gog --account user@example.com gmail get <messageId> --sanitize-content --json --wrap-untrusted
+gog --account user@example.com gmail thread get <threadId> --sanitize-content --json --wrap-untrusted
+
+gog --account user@example.com calendar events --today --json --wrap-untrusted
+gog --account user@example.com drive ls --max 20 --json --wrap-untrusted
+gog --account user@example.com docs cat <documentId> --json --wrap-untrusted
+gog --account user@example.com sheets get <spreadsheetId> Sheet1!A1:D20 --json --wrap-untrusted
+gog --account user@example.com contacts list --max 20 --json --wrap-untrusted
 ```
 
 For Gmail body inspection, prefer `--sanitize-content` unless the user

CHANGELOG.md

@@ -14,6 +14,8 @@
 - Calendar: resolve event locations through Places API with `--location-search` / `--place-id`, storing the resolved Place ID in private extended properties. (#140 / #138) — thanks @salmonumbrella.
 - Drive: add `drive changes` start-token/list/watch/stop commands for incremental sync and webhook automation. (#335)
 - Drive: add `drive activity query` for Drive Activity API v2 audit trails with item, folder, time, and action filters. (#337)
+- CLI: add `--wrap-untrusted` / `GOG_WRAP_UNTRUSTED` to mark fetched JSON/raw
+  free-text fields with external untrusted-content wrappers for agent/LLM use. (#577) — thanks @VACInc.
 - Meet: add `meet create/get/update/end/history/participants` commands for Google Meet meeting spaces and conference records. (#468) — thanks @regaw-leinad.
 - Forms: add `forms publish` to publish/unpublish existing forms and return the responder URL for automated form creation flows. (#565 / #564) — thanks @bogdanovich.
 

README.md

@@ -248,6 +248,8 @@ Useful global flags:
 - `--client <name>`: select a stored OAuth client
 - `--json`: JSON stdout
 - `--plain`: stable parseable text stdout
+- `--wrap-untrusted`: in JSON/raw output, wrap fetched free-text fields with
+  external untrusted-content markers for LLM/agent consumption
 - `--dry-run`: print intended actions where a command supports planning
 - `--no-input`: fail instead of prompting
 - `--force`: confirm destructive operations
@@ -261,6 +263,7 @@ For coding agents or CI, prefer:
 gog --account you@gmail.com \
   --enable-commands gmail.search,gmail.get,drive.ls,docs.cat \
   --gmail-no-send \
+  --wrap-untrusted \
   --json \
   gmail search 'newer_than:7d'
 ```

docs/commands/gog-admin-groups-list.md

@@ -40,6 +40,7 @@ gog admin groups list (ls) [flags]
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-groups-members-add.md

@@ -36,6 +36,7 @@ gog admin groups members add (invite) <groupEmail> <memberEmail> [flags]
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-groups-members-list.md

@@ -39,6 +39,7 @@ gog admin groups members list (ls) <groupEmail> [flags]
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-groups-members-remove.md

@@ -35,6 +35,7 @@ gog admin groups members remove (rm,del,delete) <groupEmail> <memberEmail>
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-groups-members.md

@@ -41,6 +41,7 @@ gog admin groups members <command>
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-groups.md

@@ -40,6 +40,7 @@ gog admin groups <command>
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-orgunits-create.md

@@ -37,6 +37,7 @@ gog admin orgunits (org-units,ou) create (add,new) <name> [flags]
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-orgunits-delete.md

@@ -35,6 +35,7 @@ gog admin orgunits (org-units,ou) delete (rm,del,remove) <path>
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-orgunits-get.md

@@ -35,6 +35,7 @@ gog admin orgunits (org-units,ou) get (info,show) <path>
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-orgunits-list.md

@@ -37,6 +37,7 @@ gog admin orgunits (org-units,ou) list (ls) [flags]
 | `--type` | `string` | children | Return all descendants, children, or all including parent |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-orgunits-update.md

@@ -38,6 +38,7 @@ gog admin orgunits (org-units,ou) update (edit,set) <path> [flags]
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-orgunits.md

@@ -43,6 +43,7 @@ gog admin orgunits (org-units,ou) <command>
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-users-create.md

@@ -46,6 +46,7 @@ gog admin users create (add,new) <email> [flags]
 | `--suspended` | `bool` |  | Create user in suspended state |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-users-delete.md

@@ -35,6 +35,7 @@ gog admin users delete (rm,del,remove) <userEmail>
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-users-get.md

@@ -35,6 +35,7 @@ gog admin users get (info,show) <userEmail>
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-users-list.md

@@ -40,6 +40,7 @@ gog admin users list (ls) [flags]
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-users-suspend.md

@@ -35,6 +35,7 @@ gog admin users suspend <userEmail>
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin-users.md

@@ -43,6 +43,7 @@ gog admin users <command>
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-admin.md

@@ -41,6 +41,7 @@ gog admin <command> [flags]
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-agent-exit-codes.md

@@ -35,6 +35,7 @@ gog agent exit-codes (exitcodes,exit-code)
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-agent.md

@@ -39,6 +39,7 @@ gog agent <command> [flags]
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-analytics-accounts.md

@@ -39,6 +39,7 @@ gog analytics (ga) accounts (list,ls) [flags]
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-analytics-report.md

@@ -42,6 +42,7 @@ gog analytics (ga) report <property> [flags]
 | `--to` | `string` | today | End date (YYYY-MM-DD or GA relative date like today) |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-analytics.md

@@ -40,6 +40,7 @@ gog analytics (ga) <command> [flags]
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-appscript-content.md

@@ -35,6 +35,7 @@ gog appscript (script,apps-script) content (cat) <scriptId>
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-appscript-create.md

@@ -37,6 +37,7 @@ gog appscript (script,apps-script) create (new) --title=STRING [flags]
 | `--title` | `string` |  | Project title |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-appscript-get.md

@@ -35,6 +35,7 @@ gog appscript (script,apps-script) get (info,show) <scriptId>
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-appscript-run.md

@@ -37,6 +37,7 @@ gog appscript (script,apps-script) run <scriptId> <function> [flags]
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-appscript.md

@@ -42,6 +42,7 @@ gog appscript (script,apps-script) <command> [flags]
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-auth-add.md

@@ -49,6 +49,7 @@ gog auth add <email> [flags]
 | `--timeout` | `time.Duration` |  | Authorization timeout (manual flows default to 5m) |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-auth-alias-list.md

@@ -35,6 +35,7 @@ gog auth alias list
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-auth-alias-set.md

@@ -35,6 +35,7 @@ gog auth alias set <alias> <email>
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also
 

docs/commands/gog-auth-alias-unset.md

@@ -35,6 +35,7 @@ gog auth alias unset <alias>
 | `--select`<br>`--pick`<br>`--project` | `string` |  | In JSON mode, select comma-separated fields (best-effort; supports dot paths). Desire path: use --fields for most commands. |
 | `-v`<br>`--verbose` | `bool` |  | Enable verbose logging |
 | `--version` | `kong.VersionFlag` |  | Print version and exit |
+| `--wrap-untrusted` | `bool` | false | In JSON/raw output, wrap fetched text fields in external untrusted-content markers |
 
 ## See Also