
Security News
Insecure Agents Podcast: How to Keep AI Agents From Bypassing Security Controls
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.
docupuncture
Advanced tools
Targeted, reviewable Apps Script edits in an existing Google Doc, Sheet, or Slides file.
Treat the document you already have.
Make targeted edits in an existing Google Doc, Sheet, or Slides file using a reviewable Apps Script. DocuPuncture starts with a dry run and is designed to preserve surrounding structure for supported edit types.
DRY_RUN = true.Full host routes: docupuncture.dev/install.
| Skill | Surface | Fit |
|---|---|---|
docupuncture-docs | Google Docs | Comments, tabs, lists, partial styling. |
docupuncture-sheets | Google Sheets | Grid and ranges. Notes and validation stay on cells you do not rewrite. |
docupuncture-slides | Google Slides | Text and content. Layout surgery is higher risk. |
The skill does not grant Google access. Chat returns the script. The live file changes only when you paste it into Extensions → Apps Script and run it.
pnpm add docupuncture
Copy one folder from node_modules/docupuncture/skills/ into the agent's skills directory.
git clone https://github.com/Catalyst-Forge-LLC/docupuncture.git
# then copy skills/docupuncture-docs/ (or -sheets / -slides)
Site: docupuncture.dev · Posts
applyEdits.DRY_RUN = true). Read the log, flip the flag, then run again.The script runs as you. Missing or ambiguous anchors are logged. It never invents a location. For the showcased insert and update operations, a repeat run skips work that is already there.
The other tools in the shop strike, press, or contain. A needle is still metal from the same fire, but you don't swing it. You place it.
Acupuncture treats a living body in place: insert at a point, leave the rest alone. DocuPuncture does that to a document you already care about.
Closest cousin on the shelf is TemperPass: a rule set you point an agent at.
MIT. Built by Catalyst Forge LLC.
FAQs
Targeted, reviewable Apps Script edits in an existing Google Doc, Sheet, or Slides file.
The npm package docupuncture receives a total of 672 weekly downloads. As such, docupuncture popularity was classified as not popular.
We found that docupuncture demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.

Security News
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.