Gws Reseller

Google Workspace Reseller: Manage Workspace subscriptions.

Security Scan

The skill's advertised purpose (manage Google Workspace reseller subscriptions) is plausible and the required binary matches that purpose, but the runtime instructions rely on an external shared SKILL.md for authentication and global flags while declaring no credentials or config requirements — that mismatch deserves caution before installing or using the skill.

Purpose & Capability

Name and description align with the requested binary (gws) and the CLI commands in SKILL.md. The operations listed (customers, subscriptions, resellernotify) are consistent with a Google Workspace Reseller client.

Instruction Scope

The SKILL.md defers authentication, global flags, and 'security rules' to ../gws-shared/SKILL.md or to running `gws generate-skills`, but this skill does not include or declare that file. That means crucial runtime behavior (how credentials are provided, what is sent to external endpoints, and any additional commands) is hidden outside the skill and not documented here.

Install Mechanism

Instruction-only skill with no install spec and no files written to disk by the skill itself; it simply requires a 'gws' binary to exist. This is low installation risk, provided the 'gws' binary is trusted.

Credentials

The skill declares no required environment variables or credentials but clearly needs authentication to call Google reseller APIs. The absence of declared auth variables or config paths is a mismatch — the actual auth mechanism is likely in the referenced gws-shared file, which is not included or explained here.

Persistence & Privilege

The skill does not request always:true or any elevated persistent presence. It is user-invocable and allows autonomous invocation (platform default), which is normal; nothing in the manifest indicates it modifies other skills or system-wide settings.

What to consider before installing

Do not install or run this skill until you verify how it obtains credentials. Specifically: (1) Inspect the referenced ../gws-shared/SKILL.md (or run `gws generate-skills` in a safe, isolated environment) to see which environment variables, files, or OAuth flows the tool uses. (2) Verify the origin and integrity of the 'gws' binary before granting it access to credentials. (3) Confirm the exact permissions/scopes the tool will request for Google Workspace reseller actions and apply least privilege. (4) If you cannot review gws-shared or the gws binary source, treat this skill as untrusted and avoid providing production credentials.

reseller (v1)

PREREQUISITE: Read ../gws-shared/SKILL.md for auth, global flags, and security rules. If missing, run gws generate-skills to create it.

gws reseller <resource> <method> [flags]

API Resources

customers

• get — Gets a customer account. Use this operation to see a customer account already in your reseller management, or to see the minimal account information for an existing customer that you do not manage. For more information about the API response for existing customers, see retrieving a customer account.
• insert — Orders a new customer's account.
• patch — Updates a customer account's settings. This method supports patch semantics. You cannot update customerType via the Reseller API, but a "team" customer can verify their domain and become customerType = "domain". For more information, see Verify your domain to unlock Essentials features.
• update — Updates a customer account's settings. You cannot update customerType via the Reseller API, but a "team" customer can verify their domain and become customerType = "domain". For more information, see update a customer's settings.

resellernotify

• getwatchdetails — Returns all the details of the watch corresponding to the reseller.
• register — Registers a Reseller for receiving notifications.
• unregister — Unregisters a Reseller for receiving notifications.

subscriptions

• activate — Activates a subscription previously suspended by the reseller. If you did not suspend the customer subscription and it is suspended for any other reason, such as for abuse or a pending ToS acceptance, this call will not reactivate the customer subscription.
• changePlan — Updates a subscription plan. Use this method to update a plan for a 30-day trial or a flexible plan subscription to an annual commitment plan with monthly or yearly payments. How a plan is updated differs depending on the plan and the products. For more information, see the description in manage subscriptions.
• changeRenewalSettings — Updates a user license's renewal settings. This is applicable for accounts with annual commitment plans only. For more information, see the description in manage subscriptions.
• changeSeats — Updates a subscription's user license settings. For more information about updating an annual commitment plan or a flexible plan subscription’s licenses, see Manage Subscriptions.
• delete — Cancels, suspends, or transfers a subscription to direct.
• get — Gets a specific subscription. The subscriptionId can be found using the Retrieve all reseller subscriptions method. For more information about retrieving a specific subscription, see the information descrived in manage subscriptions.
• insert — Creates or transfer a subscription. Create a subscription for a customer's account that you ordered using the Order a new customer account method.
• list — Lists of subscriptions managed by the reseller. The list can be all subscriptions, all of a customer's subscriptions, or all of a customer's transferable subscriptions. Optionally, this method can filter the response by a customerNamePrefix. For more information, see manage subscriptions.
• startPaidService — Immediately move a 30-day free trial subscription to a paid service subscription. This method is only applicable if a payment plan has already been set up for the 30-day trial subscription. For more information, see manage subscriptions.
• suspend — Suspends an active subscription. You can use this method to suspend a paid subscription that is currently in the ACTIVE state. * For FLEXIBLE subscriptions, billing is paused. * For ANNUAL_MONTHLY_PAY or ANNUAL_YEARLY_PAY subscriptions: * Suspending the subscription does not change the renewal date that was originally committed to. * A suspended subscription does not renew.

Discovering Commands

Before calling any API method, inspect it:

# Browse resources and methods
gws reseller --help

# Inspect a method's required params, types, and defaults
gws schema reseller.<resource>.<method>

Use gws schema output to build your --params and --json flags.