Gws Events

Subscribe to Google Workspace events.

Security Scan

The skill is an instruction-only wrapper around an existing gws CLI for subscribing to Google Workspace events; its declared requirements and behavior are generally consistent, but it defers authentication and some behavior to external files/commands you should inspect before use.

Purpose & Capability

The skill's name and description match the actions described (subscribe/manage Workspace events). It declares the gws CLI as a required binary, which is appropriate. One mismatch: no credentials or env vars are declared even though Google Workspace APIs require auth; the SKILL.md points to a separate ../gws-shared/SKILL.md for auth and security rules, so credentials are likely handled by the shared config or the gws CLI rather than inside this skill.

Instruction Scope

The runtime instructions are limited to using the gws CLI (e.g., gws events <resource> <method>) and to consult sibling SKILL.md files for subscribe/renew helpers. There are no explicit instructions to read arbitrary system files or exfiltrate data. However the SKILL.md tells the agent to read ../gws-shared/SKILL.md for auth and to run `gws generate-skills` if missing — these steps can create files or prompt for credentials, so you should inspect that shared file and understand what generate-skills does before running it.

Install Mechanism

There is no install spec and no code files; this is instruction-only and relies on an existing 'gws' binary. That is the lowest-risk install model, but it shifts trust to the origin and integrity of the gws binary on the host.

Credentials

The skill does not declare any required environment variables or primary credential. While this is plausible if the gws CLI manages auth (user-managed config or OAuth), it is unusual for a Google Workspace integration not to require some credential. Verify where credentials live (the referenced gws-shared SKILL.md or gws config) and ensure no unexpected secrets are created or transmitted when running helper commands like `gws generate-skills`.

Persistence & Privilege

The skill is not always-enabled, does not request elevated persistence, and has no install actions of its own. Autonomous invocation is allowed (platform default), which is expected for skills; nothing indicates it modifies other skills or system-wide settings.

Assessment

This skill is essentially a thin wrapper around a 'gws' CLI. Before installing or invoking it: (1) confirm the 'gws' binary on your system is the official and trusted client and understand how it stores credentials; (2) locate and read the referenced ../gws-shared/SKILL.md to see how auth and global flags are handled — do not run `gws generate-skills` without inspecting what it will create; (3) review any helper SKILLs (subscribe/renew) to see where event payloads are delivered (push endpoints) and what data might be exposed; and (4) if you need higher assurance, ask the skill author for the gws-shared SKILL.md contents or for provenance of the gws CLI. These checks will raise confidence that the skill behaves as advertised.

events (v1)

PREREQUISITE: Read ../gws-shared/SKILL.md for auth, global flags, and security rules. If missing, run gws generate-skills to create it.

gws events <resource> <method> [flags]

Helper Commands

Command	Description
+subscribe	Subscribe to Workspace events and stream them as NDJSON
+renew	Renew/reactivate Workspace Events subscriptions

API Resources

message

• stream — SendStreamingMessage is a streaming call that will return a stream of task update events until the Task is in an interrupted or terminal state.

operations

• get — Gets the latest state of a long-running operation. Clients can use this method to poll the operation result at intervals as recommended by the API service.

subscriptions

• create — Creates a Google Workspace subscription. To learn how to use this method, see Create a Google Workspace subscription.
• delete — Deletes a Google Workspace subscription. To learn how to use this method, see Delete a Google Workspace subscription.
• get — Gets details about a Google Workspace subscription. To learn how to use this method, see Get details about a Google Workspace subscription.
• list — Lists Google Workspace subscriptions. To learn how to use this method, see List Google Workspace subscriptions.
• patch — Updates or renews a Google Workspace subscription. To learn how to use this method, see Update or renew a Google Workspace subscription.
• reactivate — Reactivates a suspended Google Workspace subscription. This method resets your subscription's State field to ACTIVE. Before you use this method, you must fix the error that suspended the subscription. This method will ignore or reject any subscription that isn't currently in a suspended state. To learn how to use this method, see Reactivate a Google Workspace subscription.

tasks

• cancel — Cancel a task from the agent. If supported one should expect no more task updates for the task.
• get — Get the current state of a task from the agent.
• subscribe — TaskSubscription is a streaming call that will return a stream of task update events. This attaches the stream to an existing in process task. If the task is complete the stream will return the completed task (like GetTask) and close the stream.
• pushNotificationConfigs — Operations on the 'pushNotificationConfigs' resource

Discovering Commands

Before calling any API method, inspect it:

# Browse resources and methods
gws events --help

# Inspect a method's required params, types, and defaults
gws schema events.<resource>.<method>

Use gws schema output to build your --params and --json flags.