Gsuite Sdk
PassAudited by ClawScan on May 10, 2026.
Overview
This is a coherent Google Workspace helper, but it needs broad Google account access and persistent OAuth tokens, so users should restrict scopes and confirm write actions.
Before installing, make sure you want an agent to access Gmail, Calendar, Drive, and Sheets. Restrict OAuth scopes where possible, verify the external gsuite-sdk package, and require explicit confirmation before sending emails, inviting people, uploading files, or editing spreadsheets.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If used on the wrong prompt or without review, the agent could send email, create calendar invitations, upload files, or change spreadsheet data.
The documented examples include actions that send messages, notify attendees, upload Drive files, and edit Sheets. These are purpose-aligned for a Google Workspace skill, but they are high-impact account mutations.
gmail.send(...); calendar.create_event(... send_notifications=True); drive.upload("documento.pdf"); ws.update("A1", "Nuevo valor")Use the skill only for explicit user-requested actions, and confirm recipients, files, calendar attendees, spreadsheet IDs, and ranges before any write/send operation.
Installing and authenticating can give the agent continuing access to Gmail, Calendar, Drive, and Sheets under the authenticated Google account.
The skill requires Google credentials, persists OAuth tokens locally, and by default requests access across multiple Google Workspace services.
requires:\n env:\n - GOOGLE_CREDENTIALS_FILE ... tokens se guardan en `tokens.db` ... Por defecto pide acceso a Gmail, Calendar, Drive y Sheets. Se puede limitar con `--scopes`
Use least-privilege OAuth scopes with `--scopes`, prefer a dedicated Google account or OAuth client where possible, and revoke/delete stored tokens when access is no longer needed.
You are trusting the external gsuite-sdk package and its dependencies to handle Google credentials and account actions correctly.
The skill depends on an external pip package for its functionality. The submitted artifact set is instruction-only, so the package implementation was not available for static review here.
install:\n - kind: pip\n package: gsuite-sdk\n bins: [gsuite]
Install from a trusted package source, review the package repository/release, and pin versions in controlled environments.