google-workspace
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference guide for developers integrating with Google Workspace APIs. It provides standard code patterns for OAuth 2.0 flows, service account token generation, and API-specific implementations (e.g., Gmail, Chat, Calendar).
- [SAFE]: External dependencies are restricted to well-known, industry-standard libraries. The README recommends using the native
fetchAPI, only requiring thejoselibrary for JWT signing in service account scenarios. All package versions listed inSKILL.mdare for standard development tools like@cloudflare/workers-typesandwrangler. - [SAFE]: Authentication examples use environment variables (e.g.,
env.GOOGLE_CLIENT_ID,env.GOOGLE_CLIENT_SECRET) and Cloudflare Workers' secret management practices (wrangler secret put). There are no hardcoded credentials or sensitive data exposure patterns. - [SAFE]: Network operations are directed exclusively toward official Google API endpoints (
googleapis.com,accounts.google.com,google.com) and Cloudflare infrastructure. The skill does not perform any unauthorized data exfiltration or access sensitive local files.
Audit Metadata