跳转到正文
skillsafebeta
← 报告库
用途分类 / 其他用途

Gws Chat Skill 安全审计

作者说它能做什么（原文）

Google Chat: Manage Chat spaces and messages.

第三方安全检查结论

先别安装或运行

已检查文件
1
发现的风险
2
会不会运行危险命令？检查是否下载程序后直接运行、让他人远程控制电脑，或藏起要运行的命令。未发现风险
会不会泄露文件和密钥？检查是否发送含密码或密钥的文件，以及代码里是否直接写了密钥。发现 1 项风险
中风险

管理员模式可枚举组织内的 Chat 空间

原文依据：3 处
发现了什么

该 Skill 公开了组织级空间搜索，并明确要求将 `use_admin_access` 设为 `true`。提供的源码中没有限定允许搜索的组织范围、目的或结果处理方式。

为什么需要注意

若代理拥有管理员授权并在不必要的任务中使用该方法，可能暴露用户通常看不到的空间名称和相关空间元数据；后续如何处理这些结果取决于未提供的共享规则。

这段代码的正常用途

该行是在列举 Google Chat 的管理员搜索 API，并明确说明必须启用 `use_admin_access`；它没有要求默认、隐蔽或越权枚举空间。组织级搜索符合“管理 Chat 空间”的声明用途，且实际能力取决于已认证账号的管理员权限。仅凭未在此目录条目中规定搜索目的或结果处理，不能认定存在数据滥用风险。

这项判断针对展示的代码和适用条件，不表示风险已经实际发生。
SKILL.md:51来自说明文档打开原文件
  - `patch` — Updates a space. For an example, see [Update a space](https://developers.google.com/workspace/chat/update-spaces). If you're updating the `displayName` field and receive the error message `ALREADY_EXISTS`, try a different display name.. An existing space within the Google Workspace organization might already use this display name.  - `search` — Returns a list of spaces in a Google Workspace organization based on an administrator's search. In the request, set `use_admin_access` to `true`. For an example, see [Search for and manage spaces](https://developers.google.com/workspace/chat/search-manage-admin).  - `setup` — Creates a space and adds specified users to it. The calling user is automatically added to the space, and shouldn't be specified as a membership in the request. For an example, see [Set up a space with initial members](https://developers.google.com/workspace/chat/set-up-spaces). To specify the human members to add, add memberships with the appropriate `membership.member.name`. To add a human user, use `users/{user}`, where `{user}` can be the email address for the user.
查看另外 2 个位置
SKILL.md:16来自说明文档打开原文件
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
SKILL.md:3来自说明文档打开原文件
name: gws-chatdescription: "Google Chat: Manage Chat spaces and messages."metadata:
会不会删除文件或一直在后台运行？检查是否大范围删除文件、改写磁盘，或设置自动启动。发现 1 项风险
高风险

删除空间会级联清除消息和成员关系

原文依据：3 处
发现了什么

该 Skill 明确提供空间删除方法，并说明删除会连同子资源一起执行。所提供的本地规则只要求检查 API 参数，没有展示删除前预览目标或取得用户明确确认的要求。

为什么需要注意

选错空间或把含糊的“清理/管理空间”请求解释为删除时，整个命名空间及其中的消息和成员关系都可能被清除。

这段证据能说明什么

源码确实说明 `spaces.delete` 会级联删除空间内的消息和成员关系，因此在用户或代理实际调用该方法时存在不可逆的数据丢失风险。但这里是 API 方法目录，并未指示自动执行删除；而且它要求先读取另一个文件中的安全规则，该文件未提供，因此无法确认是否缺少目标预览或明确确认。用户可要求作者提供并说明共享安全规则对删除操作的保护措施。

这项判断针对展示的代码和适用条件，不表示风险已经实际发生。
SKILL.md:46来自说明文档打开原文件
  - `create` — Creates a space. Can be used to create a named space, or a group chat in `Import mode`. For an example, see [Create a space](https://developers.google.com/workspace/chat/create-spaces).  - `delete` — Deletes a named space. Always performs a cascading delete, which means that the space's child resources—like messages posted in the space and memberships in the space—are also deleted. For an example, see [Delete a space](https://developers.google.com/workspace/chat/delete-spaces).  - `findDirectMessage` — Returns the existing direct message with the specified user. If no direct message space is found, returns a `404 NOT_FOUND` error. For an example, see [Find a direct message](/chat/api/guides/v1/spaces/find-direct-message). With [app authentication](https://developers.google.com/workspace/chat/authenticate-authorize-chat-app), returns the direct message space between the specified user and the calling Chat app.
查看另外 2 个位置
SKILL.md:64来自说明文档打开原文件
Before calling any API method, inspect it:```bash# Browse resources and methodsgws chat --help# Inspect a method's required params, types, and defaultsgws schema chat.<resource>.<method>```Use `gws schema` output to build your `--params` and `--json` flags.
SKILL.md:16来自说明文档打开原文件
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
会不会绕过安全保护？检查是否跳过网站安全验证、开放过多文件权限，或取消操作前的确认。未发现风险
会不会误导 AI 或隐藏内容？检查工作说明是否要求 AI 忽略你的指令、干扰检查结果，或夹带看不见的文字。未发现风险
会不会偷偷改推广链接或收款方？检查是否强制替换推广链接或收款对象，同时要求隐瞒更改。未发现风险

Skill 逻辑拆解

3 个说明模块

该 Skill 是 Google Chat 命令行接口的命令目录；它要求代理在调用 API 前先查看具体方法的参数和默认值。

查看原文
SKILL.md:64来自说明文档打开原文件
Before calling any API method, inspect it:```bash# Browse resources and methodsgws chat --help# Inspect a method's required params, types, and defaultsgws schema chat.<resource>.<method>```Use `gws schema` output to build your `--params` and `--json` flags.

认证、全局参数和安全规则不在所提供的源码中；该 Skill 依赖相邻的共享 Skill，并在其缺失时要求生成它。因此，当前材料无法说明凭据范围、确认机制或生成操作会写入哪些文件。

查看原文
SKILL.md:16来自说明文档打开原文件
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.

公开的操作范围不只包括消息，还包括媒体传输、空间创建和修改、成员操作、组织级空间搜索以及自定义表情管理。

查看原文
SKILL.md:39来自说明文档打开原文件
  - `download` — Downloads media. Download is supported on the URI `/v1/media/{+name}?alt=media`.  - `upload` — Uploads an attachment. For an example, see [Upload media as a file attachment](https://developers.google.com/workspace/chat/upload-media-attachments).
SKILL.md:50来自说明文档打开原文件
  - `list` — Lists spaces the caller is a member of. Group chats and DMs aren't listed until the first message is sent. For an example, see [List spaces](https://developers.google.com/workspace/chat/list-spaces).  - `patch` — Updates a space. For an example, see [Update a space](https://developers.google.com/workspace/chat/update-spaces). If you're updating the `displayName` field and receive the error message `ALREADY_EXISTS`, try a different display name.. An existing space within the Google Workspace organization might already use this display name.  - `search` — Returns a list of spaces in a Google Workspace organization based on an administrator's search. In the request, set `use_admin_access` to `true`. For an example, see [Search for and manage spaces](https://developers.google.com/workspace/chat/search-manage-admin).  - `setup` — Creates a space and adds specified users to it. The calling user is automatically added to the space, and shouldn't be specified as a membership in the request. For an example, see [Set up a space with initial members](https://developers.google.com/workspace/chat/set-up-spaces). To specify the human members to add, add memberships with the appropriate `membership.member.name`. To add a human user, use `users/{user}`, where `{user}` can be the email address for the user.  - `members` — Operations on the 'members' resource  - `messages` — Operations on the 'messages' resource
从这里开始 · 工作说明SKILL.md
gws-chat
连线表示工作说明包含的模块，不是实际运行顺序。点击模块可查看原文。
文件与检查记录1 个文件

检查范围与遗漏

逐文件查看涉及的内容

下方列出本次涉及的原文范围；纳入检查不代表已查清所有问题。

  • SKILL.md已纳入全文

这份报告只针对上方版本。我们看了拿到的代码和说明文件，没有实际运行 Skill，也没有检查它另外安装的软件包。因此，这不是“保证安全”的承诺；换了版本或使用环境，结果也可能不同。

  • SKILL.md工作说明

代码和说明中提到的操作

运行命令
SKILL.md:18来自说明文档打开原文件
```bashgws chat <resource> <method> [flags]
SKILL.md:66来自说明文档打开原文件
```bash# Browse resources and methods
连接外部网站
SKILL.md:32来自说明文档打开原文件
  - `create` — Creates a custom emoji. Custom emojis are only available for Google Workspace accounts, and the administrator must turn custom emojis on for the organization. For more information, see [Learn about custom emojis in Google Chat](https://support.google.com/chat/answer/12800149) and [Manage custom emoji permissions](https://support.google.com/a/answer/12850085).  - `delete` — Deletes a custom emoji. By default, users can only delete custom emoji they created. [Emoji managers](https://support.google.com/a/answer/12850085) assigned by the administrator can delete any custom emoji in the organization …
SKILL.md:33来自说明文档打开原文件
  - `create` — Creates a custom emoji. Custom emojis are only available for Google Workspace accounts, and the administrator must turn custom emojis on for the organization. For more information, see [Learn about custom emojis in Google Cha …  - `delete` — Deletes a custom emoji. By default, users can only delete custom emoji they created. [Emoji managers](https://support.google.com/a/answer/12850085) assigned by the administrator can delete any custom emoji in the organization. See [Learn about custom emojis in Google Chat](https://support.google.com/chat/answer/12800149). Custom emojis are only available for Google Workspace accounts, and the administrator must turn custom emojis on for the organization.  - `get` — Returns details about a custom emoji. Custom emojis are only available for Google Workspace accounts, and the administrator must turn custom emojis on for the organization. For more information, see [Learn about custom emojis in …
SKILL.md:34来自说明文档打开原文件
  - `delete` — Deletes a custom emoji. By default, users can only delete custom emoji they created. [Emoji managers](https://support.google.com/a/answer/12850085) assigned by the administrator can delete any custom emoji in the organization …  - `get` — Returns details about a custom emoji. Custom emojis are only available for Google Workspace accounts, and the administrator must turn custom emojis on for the organization. For more information, see [Learn about custom emojis in Google Chat](https://support.google.com/chat/answer/12800149) and [Manage custom emoji permissions](https://support.google.com/a/answer/12850085).  - `list` — Lists custom emojis visible to the authenticated user. Custom emojis are only available for Google Workspace accounts, and the administrator must turn custom emojis on for the organization. For more information, see [Learn abou …
读取了多少行
76
文件校验值（用于核对版本）
e9b62111b4b5b8403de075e4c3ae8681b0c0e58996508cc9253641709c36b535