google-workspace-cli

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: Multiple scripts, including gws_doctor.py, auth_setup_guide.py, and workspace_audit.py, execute the gws CLI using the subprocess module. This is the intended design for providing a high-level interface to the command-line tool.
  • [COMMAND_EXECUTION]: The gws_recipe_runner.py script uses subprocess.run with shell=True to execute commands defined in an internal dictionary. While the commands themselves are hardcoded within the script, using the shell for execution is a common finding that warrants awareness of potential command injection if the command strings were to be modified to include user-supplied arguments.
  • [EXTERNAL_DOWNLOADS]: The skill documentation suggests installing the required gws CLI utility from official and well-known sources, including the npm registry and GitHub releases associated with Google Workspace and Anthropic repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 04:24 PM
Security Audit — agent-trust-hub — google-workspace-cli