gws
Warn
Audited by Socket on Sep 21, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill’s Gmail/Calendar capabilities and OAuth flow fit its stated purpose, but the install provenance is internally inconsistent: the skill tells users to install `@anthropic-ai/gws` while the verifiable official `gws` project appears to be `@googleworkspace/cli`. That mismatch is enough to make the dependency trust chain unclear even though the runtime data flow otherwise looks proportionate.
Confidence: 86%Severity: 74%
Audit Metadata