Gws Drive

Google Drive: Manage files, folders, and shared drives.

Security Scan

The skill is an instruction-only wrapper around a 'gws' CLI for Google Drive and its declared requirements (the gws binary) match the described purpose, but it delegates auth to a separate shared skill and has no install or provenance information so you should verify the gws tool and the shared-auth instructions before use.

Purpose & Capability

The name/description (Google Drive management) align with the single declared requirement: the 'gws' CLI binary. Asking for a gws binary is expected for a CLI-wrapper Drive skill; no unrelated binaries or environment variables are requested.

Instruction Scope

SKILL.md consistently documents Drive API operations via 'gws drive ...'. It explicitly directs the agent to read a sibling ../gws-shared/SKILL.md for authentication, global flags, and security rules and suggests running 'gws generate-skills' if missing. That means authentication/config is delegated to another skill/file and operations may read or write skill-related files on disk; SKILL.md does not instruct the agent to read unrelated system files or exfiltrate data.

Install Mechanism

No install spec is provided (instruction-only), which is lowest-risk for automatic code installation. The skill relies on an existing 'gws' binary; the security posture therefore depends on how that binary is obtained and installed outside the skill.

Credentials

The skill declares no required environment variables or credentials itself. Authentication is handled via the referenced gws-shared instructions, so provided env/credential needs will depend on that shared component — check that file before granting credentials.

Persistence & Privilege

The skill is not always-enabled and uses normal model invocation. It does suggest generating shared files (gws generate-skills) which may write config/auth artifacts, but it does not request elevated platform-wide privileges or alter other skills' configurations in the SKILL.md content provided.

Assessment

This skill is a straightforward wrapper that expects you to have the third-party 'gws' CLI already installed. Before installing/using: (1) verify the source and trustworthiness of the 'gws' binary you will install; (2) inspect the sibling ../gws-shared/SKILL.md (or run gws generate-skills) to see how authentication is performed and where credentials/config will be stored on disk; and (3) avoid supplying high-privilege credentials until you confirm the gws installation and shared-auth instructions are from a trusted source. If you cannot locate the gws project's official homepage or release channel, treat the binary as untrusted.

drive (v3)

PREREQUISITE: Read ../gws-shared/SKILL.md for auth, global flags, and security rules. If missing, run gws generate-skills to create it.

gws drive <resource> <method> [flags]

Helper Commands

Command	Description
+upload	Upload a file with automatic metadata

API Resources

about

• get — Gets information about the user, the user's Drive, and system capabilities. For more information, see Return user info. Required: The fields parameter must be set. To return the exact fields you need, see Return specific fields.

accessproposals

• get — Retrieves an access proposal by ID. For more information, see Manage pending access proposals.
• list — List the access proposals on a file. For more information, see Manage pending access proposals. Note: Only approvers are able to list access proposals on a file. If the user isn't an approver, a 403 error is returned.
• resolve — Approves or denies an access proposal. For more information, see Manage pending access proposals.

approvals

• get — Gets an Approval by ID.
• list — Lists the Approvals on a file.

apps

• get — Gets a specific app. For more information, see Return user info.
• list — Lists a user's installed apps. For more information, see Return user info.

changes

• getStartPageToken — Gets the starting pageToken for listing future changes. For more information, see Retrieve changes.
• list — Lists the changes for a user or shared drive. For more information, see Retrieve changes.
• watch — Subscribes to changes for a user. For more information, see Notifications for resource changes.

channels

• stop — Stops watching resources through this channel. For more information, see Notifications for resource changes.

comments

• create — Creates a comment on a file. For more information, see Manage comments and replies. Required: The fields parameter must be set. To return the exact fields you need, see Return specific fields.
• delete — Deletes a comment. For more information, see Manage comments and replies.
• get — Gets a comment by ID. For more information, see Manage comments and replies. Required: The fields parameter must be set. To return the exact fields you need, see Return specific fields.
• list — Lists a file's comments. For more information, see Manage comments and replies. Required: The fields parameter must be set. To return the exact fields you need, see Return specific fields.
• update — Updates a comment with patch semantics. For more information, see Manage comments and replies. Required: The fields parameter must be set. To return the exact fields you need, see Return specific fields.

drives

• create — Creates a shared drive. For more information, see Manage shared drives.
• get — Gets a shared drive's metadata by ID. For more information, see Manage shared drives.
• hide — Hides a shared drive from the default view. For more information, see Manage shared drives.
• list — Lists the user's shared drives. This method accepts the q parameter, which is a search query combining one or more search terms. For more information, see the Search for shared drives guide.
• unhide — Restores a shared drive to the default view. For more information, see Manage shared drives.
• update — Updates the metadata for a shared drive. For more information, see Manage shared drives.

files

• copy — Creates a copy of a file and applies any requested updates with patch semantics. For more information, see Create and manage files.
• create — Creates a file. For more information, see Create and manage files. This method supports an /upload URI and accepts uploaded media with the following characteristics: - Maximum file size: 5,120 GB - Accepted Media MIME types: */* (Specify a valid MIME type, rather than the literal */* value. The literal */* is only used to indicate that any valid MIME type can be uploaded.
• download — Downloads the content of a file. For more information, see Download and export files. Operations are valid for 24 hours from the time of creation.
• export — Exports a Google Workspace document to the requested MIME type and returns exported byte content. For more information, see Download and export files. Note that the exported content is limited to 10 MB.
• generateIds — Generates a set of file IDs which can be provided in create or copy requests. For more information, see Create and manage files.
• get — Gets a file's metadata or content by ID. For more information, see Search for files and folders. If you provide the URL parameter alt=media, then the response includes the file contents in the response body. Downloading content with alt=media only works if the file is stored in Drive.
• list — Lists the user's files. For more information, see Search for files and folders. This method accepts the q parameter, which is a search query combining one or more search terms. This method returns all files by default, including trashed files. If you don't want trashed files to appear in the list, use the trashed=false query parameter to remove trashed files from the results.
• listLabels — Lists the labels on a file. For more information, see List labels on a file.
• modifyLabels — Modifies the set of labels applied to a file. For more information, see Set a label field on a file. Returns a list of the labels that were added or modified.
• update — Updates a file's metadata, content, or both. When calling this method, only populate fields in the request that you want to modify. When updating fields, some fields might be changed automatically, such as modifiedDate. This method supports patch semantics. This method supports an /upload URI and accepts uploaded media with the following characteristics: - Maximum file size: 5,120 GB - Accepted Media MIME types: */* (Specify a valid MIME type, rather than the literal */* value.
• watch — Subscribes to changes to a file. For more information, see Notifications for resource changes.

operations

• get — Gets the latest state of a long-running operation. Clients can use this method to poll the operation result at intervals as recommended by the API service.

permissions

• create — Creates a permission for a file or shared drive. For more information, see Share files, folders, and drives. Warning: Concurrent permissions operations on the same file aren't supported; only the last update is applied.
• delete — Deletes a permission. For more information, see Share files, folders, and drives. Warning: Concurrent permissions operations on the same file aren't supported; only the last update is applied.
• get — Gets a permission by ID. For more information, see Share files, folders, and drives.
• list — Lists a file's or shared drive's permissions. For more information, see Share files, folders, and drives.
• update — Updates a permission with patch semantics. For more information, see Share files, folders, and drives. Warning: Concurrent permissions operations on the same file aren't supported; only the last update is applied.

replies

• create — Creates a reply to a comment. For more information, see Manage comments and replies.
• delete — Deletes a reply. For more information, see Manage comments and replies.
• get — Gets a reply by ID. For more information, see Manage comments and replies.
• list — Lists a comment's replies. For more information, see Manage comments and replies.
• update — Updates a reply with patch semantics. For more information, see Manage comments and replies.

revisions

• delete — Permanently deletes a file version. You can only delete revisions for files with binary content in Google Drive, like images or videos. Revisions for other files, like Google Docs or Sheets, and the last remaining file version can't be deleted. For more information, see Manage file revisions.
• get — Gets a revision's metadata or content by ID. For more information, see Manage file revisions.
• list — Lists a file's revisions. For more information, see Manage file revisions. Important: The list of revisions returned by this method might be incomplete for files with a large revision history, including frequently edited Google Docs, Sheets, and Slides. Older revisions might be omitted from the response, meaning the first revision returned may not be the oldest existing revision.
• update — Updates a revision with patch semantics. For more information, see Manage file revisions.

teamdrives

• create — Deprecated: Use drives.create instead.
• get — Deprecated: Use drives.get instead.
• list — Deprecated: Use drives.list instead.
• update — Deprecated: Use drives.update instead.

Discovering Commands

Before calling any API method, inspect it:

# Browse resources and methods
gws drive --help

# Inspect a method's required params, types, and defaults
gws schema drive.<resource>.<method>

Use gws schema output to build your --params and --json flags.