Read ../gog/SKILL.md and ../gog-drive/SKILL.md first.
Run bounded, read-only inventory commands:
gog --account user@example.com --readonly drive audit sharing --max 200 --json --wrap-untrusted
gog --account user@example.com --readonly drive audit sharing --internal-domain example.com \
--max 200 --json --wrap-untrusted
gog --account user@example.com --readonly drive audit user person@example.com --max 200 \
--json --wrap-untrusted
Classify public links, external-domain grants, broad domain grants, stale-looking direct grants, and ownership anomalies separately. Include file ID, name, owner, permission, and evidence.
Do not change permissions during an audit. If remediation is requested, present a separate,
reviewable plan and use each mutation's --dry-run before any approved write.