io.github.chrischall/gogcli-mcp-slides

Create, edit, and organize Google Slides presentations and slide content.

Stars

★ 1

Source

Official Registry

Updated

2026-06-12

// securityCaution

Requires keys· GOG_ACCOUNT, GOG_PATH
Runs locally
Official / curated
Open source
Community-trusted

Summary

This MCP tool is described as using gogcli for Google Slides deck and slide authoring, with local execution and account configuration requirements. The materials show no declared remote endpoint, and the source is from an official registry and open source, so it is best classified as caution rather than high risk; however, the missing README, undeclared license, and low adoption warrant restrained use in a least-privilege environment.

CredentialsCaution

It requires GOG_ACCOUNT and GOG_PATH. The former appears account-related and the latter a local path setting; this creates normal credential or account-context misuse risk, but the materials do not show unusually sensitive secrets or explicit credential exfiltration behavior.

Network egressCaution

The system metadata lists no declared remote host, but given the stated purpose of operating Google Slides via gogcli, interaction with the relevant service is functionally likely. The materials do not specify endpoints, data flows, or unrelated third-party destinations, so this is a normal network caution rather than a clear exfiltration red flag.

Code executionCaution

It is explicitly marked as executes-code, meaning it can start local processes or run related code/CLI components. That is a normal MCP capability; the available materials do not show requests for system privileges beyond what deck/slide authoring would ordinarily need, so this warrants caution but not a high-risk rating.

Data accessCaution

The need for GOG_PATH indicates access to at least some local path; combined with slide authoring, it may read or write data related to assets, generated output, or configuration. The materials do not define exact file scope and do not show obvious overbroad authorization, so this is a standard local data-access caution.

Supply chainCaution

It comes from an official registry and has an open-source repository with updates within the last year, all of which reduce risk. However, the missing README, undeclared license, and zero-star adoption limit verifiability and maturity. Overall, the supply chain is auditable but incompletely documented, so caution is appropriate.

Recommendations

Run it in an isolated environment and restrict accessible directories to only the required GOG_PATH.
Use a least-privilege account for GOG_ACCOUNT and avoid reusing a high-value primary account.
Review the open-source repository and installation manifests before enabling it, to confirm actual network targets and local file operations.
Monitor spawned processes and outbound connections, and use test data first to verify it does not access unrelated directories or services.

Audited by: gpt-5.4 · 2026-06-17

// install

Copy the install command and let the AI configure it · recommended for beginners

Please install the "io.github.chrischall/gogcli-mcp-slides" MCP server from askskill:
Run: claude mcp add 'io-github-chrischall-gogcli-mcp-slides' -- npx -y gogcli-mcp-slides