Recipe Create Vacation Responder

Enable a Gmail out-of-office auto-reply with a custom message and date range.

Security Scan

The skill's instructions and declared requirements line up with its stated purpose (enabling a Gmail vacation responder), but it assumes an already-installed/authenticated gws CLI and has minor metadata omissions you should be aware of.

Purpose & Capability

Name/description match the runtime instructions: the SKILL.md shows gws gmail users settings updateVacation/getVacation which is exactly what an OOO responder recipe would do. The declared required binary (gws) and required skill (gws-gmail) are appropriate.

Instruction Scope

Instructions are narrowly scoped to enabling/disabling Gmail vacation responder for the authenticated user ('me'). They do not instruct reading unrelated files or exfiltrating data. However, they will execute gws CLI commands that change account settings — the SKILL.md does not describe authentication or consent steps.

Install Mechanism

Instruction-only skill with no install spec, so nothing is downloaded or written by the skill itself. The risk surface depends on the existing 'gws' binary on the host (not supplied by this skill).

Credentials

The skill declares no env vars or config paths, but the gws CLI will use existing local credentials/config (OAuth or service account) on the host. The skill does not explicitly document this dependency — ensure you understand which account/credentials gws will use before running.

Persistence & Privilege

always:false and no install actions; autonomous invocation is allowed (platform default). This means an agent could run the commands autonomously, which is expected behavior but you should be comfortable with the agent having the ability to change your Gmail settings.

Assessment

This recipe is coherent for enabling a Gmail vacation responder, but before installing or invoking it: (1) Verify the 'gws' CLI on your system is the legitimate tool you expect and check how it is authenticated (OAuth token, gcloud, service account), because the recipe will run gws commands that modify your account settings. (2) Confirm which account 'gws' will act as (the recipe uses 'me') so you don't accidentally change a different account or a privileged/admin account. (3) Be aware the skill is instruction-only and won't install anything itself — if 'gws' is missing you'll need to install it from a trusted source. (4) Note the SKILL.md metadata version (0.22.5) differs from the registry version (1.0.12); this is likely benign but worth checking with the skill author if you need provenance. If you are comfortable with the CLI and credentials, the skill is proportionate to its purpose; otherwise do not grant the agent autonomous runs that could change your Gmail settings without review.

Set Up a Gmail Vacation Responder

PREREQUISITE: Load the following skills to execute this recipe: gws-gmail

Enable a Gmail out-of-office auto-reply with a custom message and date range.

Steps

1. Enable vacation responder: gws gmail users settings updateVacation --params '{"userId": "me"}' --json '{"enableAutoReply": true, "responseSubject": "Out of Office", "responseBodyPlainText": "I am out of the office until Jan 20. For urgent matters, contact [e-mail].", "restrictToContacts": false, "restrictToDomain": false}'
2. Verify settings: gws gmail users settings getVacation --params '{"userId": "me"}'
3. Disable when back: gws gmail users settings updateVacation --params '{"userId": "me"}' --json '{"enableAutoReply": false}'