gws-setup

Warn

Audited by Socket on May 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Mostly coherent setup guidance for an official Google Workspace CLI using official Google and npm flows. The main risks are broad OAuth scope recommendations, handling of raw credential material, and especially transitive installation of 90+ additional skills that expands the agent's trusted surface. Suspicious rather than malicious due to capability expansion and credential sensitivity, but not incompatible with the stated purpose.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
May 14, 2026, 06:21 AM
Package URL
pkg:socket/skills-sh/jezweb%2Fclaude-skills%2Fgws-setup%2F@33bca6d8f5d8ad64ac77e6ed4ab037657ddd229c
Security Audit — socket — gws-setup