Google Apps Script is a powerful scripting environment provided by Google that can make authenticated requests against user data inside of Googles properties. Users are not clearly told that theyre allowing a 3rd party access to their data until it is too late, making social engineering attacks far too easy. Google should add a prominent warning, both at the top of the script page and in the authorization box. Google chose not to fix this issue before publication, and declined the opportunity to fix before publication.”]