gws-setup

Warn

Audited by Socket on Mar 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

Mostly coherent setup guidance for an official Google Workspace CLI using official Google and npm flows. The main risks are broad OAuth scope recommendations, handling of raw credential material, and especially transitive installation of 90+ additional skills that expands the agent's trusted surface. Suspicious rather than malicious due to capability expansion and credential sensitivity, but not incompatible with the stated purpose.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Mar 18, 2026, 02:25 AM
Package URL
pkg:socket/skills-sh/jezweb%2Fclaude-skills%2Fgws-setup%2F@f56761fd73f116455c5a53a12277ec6f0a6d4519