google-workspace-cli
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Multiple scripts, including
gws_doctor.py,auth_setup_guide.py, andworkspace_audit.py, execute thegwsCLI using thesubprocessmodule. This is the intended design for providing a high-level interface to the command-line tool. - [COMMAND_EXECUTION]: The
gws_recipe_runner.pyscript usessubprocess.runwithshell=Trueto execute commands defined in an internal dictionary. While the commands themselves are hardcoded within the script, using the shell for execution is a common finding that warrants awareness of potential command injection if the command strings were to be modified to include user-supplied arguments. - [EXTERNAL_DOWNLOADS]: The skill documentation suggests installing the required
gwsCLI utility from official and well-known sources, including the npm registry and GitHub releases associated with Google Workspace and Anthropic repositories.
Audit Metadata