gws-cli
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the Google Workspace CLI via npm (
@googleworkspace/cli), which is a well-known service for package distribution. It also mentions alternative installation methods from the official Google Workspace GitHub repository. - [COMMAND_EXECUTION]: The skill provides instructions for executing the
gwsbinary to perform various Google Workspace tasks. It includes a pre-requisite script (scripts/check-prereqs.sh) to verify the binary's presence and authentication status. - [CREDENTIALS_UNSAFE]: The skill explicitly instructs the agent to never print tokens, OAuth client secrets, or service account JSON contents. It uses standard environment variables like
GOOGLE_APPLICATION_CREDENTIALSfor authentication, which is a safe practice for secret management.
Audit Metadata