Google Workspace Automation

• Verdict: Pass
• Confidence: High
• Analyzed: May 1, 2026, 6:07 AM
• Findings: 1
• Version: 0.1.0

Overview

This skill appears to generate local Google Workspace automation plans, but users should review the broad OAuth scopes it suggests before implementing them.

This looks safe to install as a local planning aid. Treat its OAuth scope output as a draft: review and narrow the scopes before building or authorizing any real Google Workspace automation.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI03: Identity and Privilege Abuse

NoteHigh Confidence

What this means

If the generated scopes are used as-is, an automation may receive broad access to Gmail, Drive, Sheets, Calendar, or Docs data.

Why it was flagged

The planner maps selected services to broad OAuth scopes. It does not use credentials itself, but a user implementing the generated plan could grant wider Google Workspace access than necessary for a specific action.

Skill content

"drive": "https://www.googleapis.com/auth/drive", "sheets": "https://www.googleapis.com/auth/spreadsheets", "calendar": "https://www.googleapis.com/auth/calendar"

Recommendation

Before implementing a generated plan, compare each suggested scope against Google's narrower scopes and grant only the minimum needed for the exact actions.