ClawHub
Back to skill

Security audit

Google Workspace CLI

Security checks across malware telemetry and agentic risk

Overview

This is a powerful but clearly disclosed Google Workspace CLI skill that emphasizes scoped access, dry runs, confirmations, and local-only configuration storage.

Install this only if you want an agent to operate Google Workspace through gws. Use narrow OAuth scopes, keep write_policy at dry-run-first unless you intentionally approve more autonomy, require explicit confirmation for send/share/delete/admin actions, and review any local data migration from old skill folders before allowing files to be moved.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The file documents `messages.delete`/`batchDelete` as permanent mailbox deletion and notes the required scope, but it does not pair that guidance with an explicit approval or confirmation requirement at the point of use. In a terminal automation skill for Gmail administration, this omission increases the chance that an agent or operator uses irreversible deletion in bulk without adequate user awareness, causing permanent data loss.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The setup instructions direct the agent to silently create a data directory and initialize multiple files under the user's home directory, then change permissions, without first notifying the user or obtaining consent. In an agent setting, unannounced filesystem writes can violate user expectations, overwrite meaningful placeholders, and normalize hidden state creation that affects later behavior and auditability.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The instruction to move data from prior locations into a new directory causes modification of user-owned files without an explicit warning or approval step. Moving data is riskier than reading it because it can break existing workflows, alter references, or result in accidental loss if the migration is partial or incorrect.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.