Google Workspace CLI

• Verdict: Pass
• Confidence: Medium
• Analyzed: Mar 5, 2026, 12:29 AM
• Findings: 0
• Version: 1.0.1

Overview

This skill appears to be a coherent Google Workspace CLI wrapper (npm package -> gws) and its requirements match its stated purpose, but metadata omissions and an unknown source mean you should verify the package origin and OAuth scopes before installing.

Before installing: (1) Verify the npm package and GitHub repository are the legitimate Google Workspace CLI projects (check maintainers, recent commits, and package publisher); (2) Review what OAuth scopes the CLI will request and grant only minimal scopes required for your use; (3) Consider using a dedicated account or limited-permission credentials for tooling access; (4) Inspect the ~/.config/gws directory after first run to understand what tokens are stored and where; (5) Avoid providing client secrets or long-lived admin credentials unless you trust the package source. The skill itself is coherent, but the metadata omission of env/config requirements and unknown registry source justify cautious verification.