Skip to content
skillsafebeta
← Report library
Purpose / Other

Gws Admin Reports Skill Security Audit

What the author says it does (original text)

Google Workspace Admin SDK: Audit logs and usage reports.

Independent security check

Low-risk issues found

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.Risks found: 1
Low risk

A generation command is requested when the shared Skill is missing

Source references: 1
What we found

The prerequisite says to run `gws generate-skills` if `../gws-shared/SKILL.md` is absent. This is not a read-only check: it invokes the locally installed `gws` program to create files, while the supplied material does not show its output scope or generated content.

Why this matters

When the condition applies, the local Skill file set is persistently changed. The supplied lines do not establish which files are created, whether existing files can be touched, or what security rules are generated.

What this evidence establishes

The line does instruct running a generation command when the shared Skill is missing, which may create local files. However, the evidence does not include the implementation, destination paths, overwrite behavior, or generated content of `gws generate-skills`, so its effect on existing user files cannot be determined. A user can ask the author for the exact write scope and run it with restricted filesystem access or in a backed-up environment.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.No risks found
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

2 instruction sections

This Skill is a command reference for the Google Workspace Admin Reports CLI, covering activity audits, push notifications, and customer, entity, and user usage reports. It lists these capabilities but does not directly instruct the agent to invoke the account-level APIs.

View source
SKILL.md:19In the instructionsOpen original file
```bashgws admin-reports <resource> <method> [flags]```
SKILL.md:26In the instructionsOpen original file
  - `list` — Retrieves a list of activities for a specific customer's account and application such as the Admin console application or the Google Drive application. For more information, see the guides for administrator and Google Drive activity reports. For more information about the activity report's parameters, see the activity parameters reference guides.  - `watch` — Start receiving notifications for account activities. For more information, see Receiving Push Notifications.
SKILL.md:35In the instructionsOpen original file
  - `get` — Retrieves a report which is a collection of properties and statistics for a specific customer's account. For more information, see the Customers Usage Report guide. For more information about the customer report's parameters, see the Customers Usage parameters reference guides.
SKILL.md:43In the instructionsOpen original file
  - `get` — Retrieves a report which is a collection of properties and statistics for a set of users with the account. For more information, see the User Usage Report guide. For more information about the user report's parameters, see the Users Usage parameters reference guides.

The Skill instructs the agent to inspect a method schema before invoking an API and then construct parameters from it. This may reduce parameter mistakes, although it does not explain how to limit report scope or handle returned audit data.

View source
SKILL.md:47In the instructionsOpen original file
Before calling any API method, inspect it:```bash# Browse resources and methodsgws admin-reports --help# Inspect a method's required params, types, and defaultsgws schema admin-reports.<resource>.<method>```Use `gws schema` output to build your `--params` and `--json` flags.

Authentication, global flags, and security rules are delegated to an adjacent shared Skill. That shared file is not included in the supplied material, so those rules cannot be verified in this audit.

View source
SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Start here · InstructionsSKILL.md
gws-admin-reports
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:18In the instructionsOpen original file
```bashgws admin-reports <resource> <method> [flags]
SKILL.md:49In the instructionsOpen original file
```bash# Browse resources and methods
Lines read
59
File checksum (to compare versions)
b2fdc7fd208fa340d08a747eafd20e36e9269cd4e9a1bfd42f5aaf8eed3398e4