gws

Warn

Audited by Socket on Sep 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s Gmail/Calendar capabilities and OAuth flow fit its stated purpose, but the install provenance is internally inconsistent: the skill tells users to install `@anthropic-ai/gws` while the verifiable official `gws` project appears to be `@googleworkspace/cli`. That mismatch is enough to make the dependency trust chain unclear even though the runtime data flow otherwise looks proportionate.

Confidence: 86%Severity: 74%
Audit Metadata
Analyzed At
Sep 21, 2026, 12:14 PM
Package URL
pkg:socket/skills-sh/pietz%2Fskills%2Fgws%2F@f0b75bfa629259c114b71cb5c8ecd85918c7b9860c1e998dee0fe36dca5c6c86