Gws Tasks

Google Tasks: Manage task lists and tasks.

Security Scan

The skill's commands and required gws binary match its stated purpose, but it defers authentication and security rules to an external ../gws-shared/SKILL.md (not declared here), which is an incoherence that could lead to unexpected credential access — inspect that shared file and the gws binary before use.

Purpose & Capability

Name/description (Google Tasks via a CLI) align with the declared runtime requirement of the gws binary and the listed tasks API operations. Requiring a gws CLI is expected for this purpose.

Instruction Scope

The SKILL.md only instructs running gws commands (which is appropriate) but explicitly tells the agent to 'Read ../gws-shared/SKILL.md for auth, global flags, and security rules.' That directs the agent to access an external file outside this skill's folder for authentication and policy — a scope expansion that may expose credentials or behavior not declared in this skill.

Install Mechanism

Instruction-only skill with no install spec and no code files. Nothing will be written to disk by the skill itself; the risk surface is limited to invoking an existing gws binary on PATH.

Credentials

This skill declares no required env vars or primary credential, yet it defers auth to a shared SKILL.md. That mismatch is concerning: the actual credentials/scopes needed are not declared here, so the agent or user may be prompted to use credentials from the shared configuration unexpectedly.

Persistence & Privilege

always is false and disable-model-invocation is default (model may invoke autonomously, which is normal). The skill does not request system-wide persistence or modify other skills' configs.

What to consider before installing

Before installing or enabling this skill: 1) Verify the 'gws' binary is legitimate and from a trusted source (confirm vendor, version, and checksum) because the skill will run that binary. 2) Inspect the referenced ../gws-shared/SKILL.md file to see exactly how authentication is performed and which environment variables, tokens, or files it uses — do not proceed if that file requests broad or unrelated credentials. 3) Confirm the OAuth scopes or API keys used are limited to Google Tasks (least privilege). 4) If you cannot inspect the shared SKILL.md or the gws binary, treat this skill as higher risk; consider testing first with a disposable/non-sensitive account. 5) If you want to proceed, ensure logs and network access are monitored and only grant the minimum required credentials.

tasks (v1)

PREREQUISITE: Read ../gws-shared/SKILL.md for auth, global flags, and security rules. If missing, run gws generate-skills to create it.

gws tasks <resource> <method> [flags]

API Resources

tasklists

• delete — Deletes the authenticated user's specified task list. If the list contains assigned tasks, both the assigned tasks and the original tasks in the assignment surface (Docs, Chat Spaces) are deleted.
• get — Returns the authenticated user's specified task list.
• insert — Creates a new task list and adds it to the authenticated user's task lists. A user can have up to 2000 lists at a time.
• list — Returns all the authenticated user's task lists. A user can have up to 2000 lists at a time.
• patch — Updates the authenticated user's specified task list. This method supports patch semantics.
• update — Updates the authenticated user's specified task list.

tasks

• clear — Clears all completed tasks from the specified task list. The affected tasks will be marked as 'hidden' and no longer be returned by default when retrieving all tasks for a task list.
• delete — Deletes the specified task from the task list. If the task is assigned, both the assigned task and the original task (in Docs, Chat Spaces) are deleted. To delete the assigned task only, navigate to the assignment surface and unassign the task from there.
• get — Returns the specified task.
• insert — Creates a new task on the specified task list. Tasks assigned from Docs or Chat Spaces cannot be inserted from Tasks Public API; they can only be created by assigning them from Docs or Chat Spaces. A user can have up to 20,000 non-hidden tasks per list and up to 100,000 tasks in total at a time.
• list — Returns all tasks in the specified task list. Doesn't return assigned tasks by default (from Docs, Chat Spaces). A user can have up to 20,000 non-hidden tasks per list and up to 100,000 tasks in total at a time.
• move — Moves the specified task to another position in the destination task list. If the destination list is not specified, the task is moved within its current list. This can include putting it as a child task under a new parent and/or move it to a different position among its sibling tasks. A user can have up to 2,000 subtasks per task.
• patch — Updates the specified task. This method supports patch semantics.
• update — Updates the specified task.

Discovering Commands

Before calling any API method, inspect it:

# Browse resources and methods
gws tasks --help

# Inspect a method's required params, types, and defaults
gws schema tasks.<resource>.<method>

Use gws schema output to build your --params and --json flags.