Gws Tasks

Google Tasks: Manage task lists and tasks.

Security Scan

The skill is a thin wrapper around a 'gws' CLI (which fits its name), but it refers to an external shared SKILL.md for auth and generation steps without declaring any credentials or install behavior — this mismatch warrants caution.

Purpose & Capability

The declared requirement (the 'gws' binary) matches the skill's stated purpose (managing Google Tasks via a CLI). Nothing else in the SKILL.md claims access to unrelated services or tools.

Instruction Scope

Runtime instructions are limited to invoking 'gws tasks' and inspecting schemas. However, the SKILL.md explicitly instructs the agent to read '../gws-shared/SKILL.md' for auth, global flags, and security rules and to run 'gws generate-skills' if the file is missing. That means the agent will be directed to read/produce files outside the skill's own directory and potentially create auth artifacts — behavior users should review before enabling.

Install Mechanism

This is an instruction-only skill with no install spec and no code files; nothing is downloaded or written by an installer as part of the skill package itself.

Credentials

The skill declares no required environment variables or primary credential, but delegates authentication to an external shared SKILL.md. That externalization is reasonable for reuse, but the skill package does not declare or document what credentials or files the shared config needs (OAuth tokens, service-account files, or other secrets). The lack of declared credentials is an informational gap that could hide unexpected access to secrets.

Persistence & Privilege

The skill does not request 'always: true' and is user-invocable only. It does instruct generating a shared SKILL.md if missing, which will create files on disk — normal for CLI auth setup but worth auditing.

What to consider before installing

This skill appears to be a straight wrapper around the 'gws' CLI for Google Tasks, which is coherent — but it delegates authentication and security rules to a sibling file ('../gws-shared/SKILL.md') that the agent is told to read or generate. Before installing: (1) inspect the referenced '../gws-shared/SKILL.md' to see exactly what credentials, file paths, or tokens it expects; (2) verify the provenance and integrity of the 'gws' binary on your system (is it from a trusted vendor/release?); (3) do not run 'gws generate-skills' or allow the agent to create auth files until you review what it will write and where (it could create sensitive files on disk); and (4) if you need strict least privilege, ensure the shared config uses scoped OAuth credentials or service-account keys stored in a location you control. Because the skill omits explicit credential requirements, treat it cautiously and audit the shared auth workflow before granting access.

tasks (v1)

PREREQUISITE: Read ../gws-shared/SKILL.md for auth, global flags, and security rules. If missing, run gws generate-skills to create it.

gws tasks <resource> <method> [flags]

API Resources

tasklists

• delete — Deletes the authenticated user's specified task list. If the list contains assigned tasks, both the assigned tasks and the original tasks in the assignment surface (Docs, Chat Spaces) are deleted.
• get — Returns the authenticated user's specified task list.
• insert — Creates a new task list and adds it to the authenticated user's task lists. A user can have up to 2000 lists at a time.
• list — Returns all the authenticated user's task lists. A user can have up to 2000 lists at a time.
• patch — Updates the authenticated user's specified task list. This method supports patch semantics.
• update — Updates the authenticated user's specified task list.

tasks

• clear — Clears all completed tasks from the specified task list. The affected tasks will be marked as 'hidden' and no longer be returned by default when retrieving all tasks for a task list.
• delete — Deletes the specified task from the task list. If the task is assigned, both the assigned task and the original task (in Docs, Chat Spaces) are deleted. To delete the assigned task only, navigate to the assignment surface and unassign the task from there.
• get — Returns the specified task.
• insert — Creates a new task on the specified task list. Tasks assigned from Docs or Chat Spaces cannot be inserted from Tasks Public API; they can only be created by assigning them from Docs or Chat Spaces. A user can have up to 20,000 non-hidden tasks per list and up to 100,000 tasks in total at a time.
• list — Returns all tasks in the specified task list. Doesn't return assigned tasks by default (from Docs, Chat Spaces). A user can have up to 20,000 non-hidden tasks per list and up to 100,000 tasks in total at a time.
• move — Moves the specified task to another position in the destination task list. If the destination list is not specified, the task is moved within its current list. This can include putting it as a child task under a new parent and/or move it to a different position among its sibling tasks. A user can have up to 2,000 subtasks per task.
• patch — Updates the specified task. This method supports patch semantics.
• update — Updates the specified task.

Discovering Commands

Before calling any API method, inspect it:

# Browse resources and methods
gws tasks --help

# Inspect a method's required params, types, and defaults
gws schema tasks.<resource>.<method>

Use gws schema output to build your --params and --json flags.