Skip to content
skillsafebeta
← Report library
Purpose / Other

Gws Meet Skill Security Audit

What the author says it does (original text)

Manage Google Meet conferences.

Independent security check

Security risks found

Files checked
1
Risks found
4
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.Risks found: 1
Medium risk

Participant and meeting-content resources may expose sensitive information

Source references: 2
What we found

The Skill exposes operations for participants, recordings, smart notes, and transcripts. These resources may reveal identities, spoken content, and confidential discussions.

Why this matters

Overbroad requests or output sent into an inappropriate conversation could disclose personal information and confidential meeting content.

The skill explicitly exposes operations for participants, recordings, smart notes, and transcripts. Invoking relevant read methods could reveal identities and meeting content to the agent. The source does not show automatic access or exfiltration; actual exposure depends on the chosen method and Google authorization. Users can limit OAuth scopes and require the meeting and resource scope to be stated before access.

SKILL.md:26In the instructionsOpen original file
  - `get` — Gets a conference record by conference ID.  - `list` — Lists the conference records. By default, ordered by start time and in descending order.  - `participants` — Operations on the 'participants' resource  - `recordings` — Operations on the 'recordings' resource  - `smartNotes` — Operations on the 'smartNotes' resource  - `transcripts` — Operations on the 'transcripts' resource
Show 1 other places
SKILL.md:28In the instructionsOpen original file
  - `list` — Lists the conference records. By default, ordered by start time and in descending order.  - `participants` — Operations on the 'participants' resource  - `recordings` — Operations on the 'recordings' resource  - `smartNotes` — Operations on the 'smartNotes' resource  - `transcripts` — Operations on the 'transcripts' resource
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.Risks found: 1
Medium risk

A missing shared dependency triggers generation of new Skill files

Source references: 1
What we found

The prerequisite tells the agent to run `gws generate-skills` when `../gws-shared/SKILL.md` is absent. This can make persistent changes in an adjacent location, and the supplied source does not show the generated scope or content.

Why this matters

The user's Skill directory may be modified without separate confirmation, and later agents may trust the newly generated authentication and security instructions.

This is an active conditional instruction: if the shared file is missing, the agent runs a generation command that may create persistent files outside this skill's directory. The supplied source does not describe output locations, overwrite behavior, or generated content. Users can ask the author to document the write scope and restrict writes to approved directories.

SKILL.md:16In the instructionsOpen original file
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.Risks found: 1
Medium risk

Creating or patching meeting spaces persistently changes Google Meet account state

Source references: 3
What we found

The Skill exposes `spaces.create` and `spaces.patch`, which can create a meeting space or modify its details. The supplied instructions do not require a preview or confirmation before these write operations.

Why this matters

Incorrect parameters or target selection could create unwanted spaces or alter existing meeting settings for future participants.

`create` and `patch` are explicit persistent write operations that can create a meeting space or modify its details. The instructions require inspecting method parameters but do not require previewing changes or obtaining user confirmation, so a wrong target or parameter could alter meeting configuration. Users can separate write access from read-only access and require the target and full change to be shown before execution.

SKILL.md:35In the instructionsOpen original file
  - `create` — Creates a space.  - `endActiveConference` — Ends an active conference (if there's one). For an example, see [End active conference](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#end-active-conference).  - `get` — Gets details about a meeting space. For an example, see [Get a meeting space](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#get-meeting-space).  - `patch` — Updates details about a meeting space. For an example, see [Update a meeting space](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#update-meeting-space).
Show 2 other places
SKILL.md:38In the instructionsOpen original file
  - `get` — Gets details about a meeting space. For an example, see [Get a meeting space](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#get-meeting-space).  - `patch` — Updates details about a meeting space. For an example, see [Update a meeting space](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#update-meeting-space).
SKILL.md:42In the instructionsOpen original file
Before calling any API method, inspect it:
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.Risks found: 1
Medium risk

The Skill can terminate a meeting that is currently in progress

Source references: 2
What we found

`spaces.endActiveConference` ends an active conference. This is an immediate external action affecting every participant, not merely a read operation.

Why this matters

Selecting the wrong meeting or executing without explicit confirmation could interrupt communications or business activity.

This is an explicit external state-changing capability: invoking the method ends an active conference in the targeted space, affecting all attendees. The source lists the capability without requiring confirmation, though it does not show that the skill invokes it automatically. Users can require explicit confirmation after the target meeting is shown and restrict use of this method.

SKILL.md:33In the instructionsOpen original file
### spaces  - `create` — Creates a space.  - `endActiveConference` — Ends an active conference (if there's one). For an example, see [End active conference](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#end-active-conference).  - `get` — Gets details about a meeting space. For an example, see [Get a meeting space](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#get-meeting-space).  - `patch` — Updates details about a meeting space. For an example, see [Update a meeting space](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#update-meeting-space).
Show 1 other places
SKILL.md:36In the instructionsOpen original file
  - `create` — Creates a space.  - `endActiveConference` — Ends an active conference (if there's one). For an example, see [End active conference](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#end-active-conference).  - `get` — Gets details about a meeting space. For an example, see [Get a meeting space](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#get-meeting-space).

Inside this skill

2 instruction sections

This Skill is a command reference for managing Google Meet through the `gws` executable, which must already be available.

View source
SKILL.md:8In the instructionsOpen original file
    category: "productivity"    requires:      bins:        - gws    cliHelp: "gws meet --help"---
SKILL.md:18In the instructionsOpen original file
```bashgws meet <resource> <method> [flags]```

The Skill directs the agent to inspect each API method's schema before constructing request parameters.

View source
SKILL.md:42In the instructionsOpen original file
Before calling any API method, inspect it:```bash# Browse resources and methodsgws meet --help# Inspect a method's required params, types, and defaultsgws schema meet.<resource>.<method>```Use `gws schema` output to build your `--params` and `--json` flags.

The documented scope includes reading conference records and related participant, recording, smart-note, and transcript resources.

View source
SKILL.md:24In the instructionsOpen original file
### conferenceRecords  - `get` — Gets a conference record by conference ID.  - `list` — Lists the conference records. By default, ordered by start time and in descending order.  - `participants` — Operations on the 'participants' resource  - `recordings` — Operations on the 'recordings' resource  - `smartNotes` — Operations on the 'smartNotes' resource  - `transcripts` — Operations on the 'transcripts' resource
Start here · InstructionsSKILL.md
gws-meet
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions

Operations mentioned in code and instructions

Run commands
SKILL.md:18In the instructionsOpen original file
```bashgws meet <resource> <method> [flags]
SKILL.md:44In the instructionsOpen original file
```bash# Browse resources and methods
Connect to websites
SKILL.md:36In the instructionsOpen original file
  - `create` — Creates a space.  - `endActiveConference` — Ends an active conference (if there's one). For an example, see [End active conference](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#end-active-conference).  - `get` — Gets details about a meeting space. For an example, see [Get a meeting space](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#get-meeting-space).
SKILL.md:37In the instructionsOpen original file
  - `endActiveConference` — Ends an active conference (if there's one). For an example, see [End active conference](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#end-active-conference).  - `get` — Gets details about a meeting space. For an example, see [Get a meeting space](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#get-meeting-space).  - `patch` — Updates details about a meeting space. For an example, see [Update a meeting space](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#update-meeting-space).
SKILL.md:38In the instructionsOpen original file
  - `get` — Gets details about a meeting space. For an example, see [Get a meeting space](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#get-meeting-space).  - `patch` — Updates details about a meeting space. For an example, see [Update a meeting space](https://developers.google.com/workspace/meet/api/guides/meeting-spaces#update-meeting-space).
Lines read
54
File checksum (to compare versions)
ac88b8d879a0a35e73b176522011117e14170aeb699980b60426929120f22a7e