Gws Alertcenter

Google Workspace Alert Center: Manage Workspace security alerts.

Security Scan

The skill's commands match its description, but the runtime instructions reference an external shared SKILL.md for authentication and global flags while the registry metadata declares no credentials — this mismatch and the implicit filesystem access are concerning.

Purpose & Capability

Name/description align with the provided instructions: the SKILL.md is a thin wrapper describing how to run 'gws alertcenter' methods. Requiring the 'gws' binary is appropriate for a CLI-based Google Workspace Alert Center helper.

Instruction Scope

The instructions explicitly tell the agent to read '../gws-shared/SKILL.md' for auth, global flags, and security rules. That directs the agent to read a file outside this skill's own manifest and suggests additional steps (or credentials) not present in this skill's metadata. It also suggests running 'gws generate-skills' if missing, which could create or modify files.

Install Mechanism

No install spec and no code files are present; this is instruction-only and does not write new code to disk by itself. The only runtime dependency is the 'gws' binary, which is declared.

Credentials

The skill metadata lists no required environment variables or credentials, but the SKILL.md defers authentication to an external shared SKILL.md. That implies required credentials (service account keys, OAuth tokens, or similar) may exist but are not declared — a visibility gap. Lack of declared credentials makes it unclear what secrets the agent will need or access at runtime.

Persistence & Privilege

The skill is not always-included and is user-invocable; it does not request persistent system-level presence or elevated privileges in the registry metadata.

What to consider before installing

This skill appears to be a thin wrapper for the 'gws' CLI and is coherent with managing Google Workspace alerts, but the runtime docs point to a shared '../gws-shared/SKILL.md' for authentication while the registry lists no credentials. Before installing: (1) inspect the referenced ../gws-shared/SKILL.md to see what credentials or files it requires (service account JSON, OAuth tokens, environment variables), (2) verify the 'gws' binary source and trustworthiness, (3) confirm how auth is stored and whether secrets would be read from disk or environment, and (4) prefer skills that explicitly declare required env vars/credentials and provide a homepage/source. If you cannot inspect the shared SKILL.md or confirm the auth method, treat this as potentially risky and avoid installing or run it in a restricted/sandboxed environment.

alertcenter (v1beta1)

PREREQUISITE: Read ../gws-shared/SKILL.md for auth, global flags, and security rules. If missing, run gws generate-skills to create it.

gws alertcenter <resource> <method> [flags]

API Resources

alerts

• batchDelete — Performs batch delete operation on alerts.
• batchUndelete — Performs batch undelete operation on alerts.
• delete — Marks the specified alert for deletion. An alert that has been marked for deletion is removed from Alert Center after 30 days. Marking an alert for deletion has no effect on an alert which has already been marked for deletion. Attempting to mark a nonexistent alert for deletion results in a NOT_FOUND error.
• get — Gets the specified alert. Attempting to get a nonexistent alert returns NOT_FOUND error.
• getMetadata — Returns the metadata of an alert. Attempting to get metadata for a non-existent alert returns NOT_FOUND error.
• list — Lists the alerts.
• undelete — Restores, or "undeletes", an alert that was marked for deletion within the past 30 days. Attempting to undelete an alert which was marked for deletion over 30 days ago (which has been removed from the Alert Center database) or a nonexistent alert returns a NOT_FOUND error. Attempting to undelete an alert which has not been marked for deletion has no effect.
• feedback — Operations on the 'feedback' resource

v1beta1

• getSettings — Returns customer-level settings.
• updateSettings — Updates the customer-level settings.

Discovering Commands

Before calling any API method, inspect it:

# Browse resources and methods
gws alertcenter --help

# Inspect a method's required params, types, and defaults
gws schema alertcenter.<resource>.<method>

Use gws schema output to build your --params and --json flags.