Skills gws-drive

📦

gws-drive

Name: gws-drive
Author: googleworkspace

v0.23.0 Content revision r2 Medium Risk ⚙️ External commands🌐 Network access📁 Filesystem access

Manage Google Drive with GWS

Google Drive administration often requires many separate API operations. This skill guides Claude and Codex through supported gws commands for files, sharing, comments, revisions, and notifications.

Supports: Claude Codex Code(CC)

📊 73 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "gws-drive" from https://skillstore.io/skills/googleworkspace-gws-drive.md and its manifest at https://skillstore.io/api/skills/googleworkspace-gws-drive/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/googleworkspace-gws-drive.md Signed manifest GET /api/skills/googleworkspace-gws-drive/manifest Signed lockfile GET /api/skills/googleworkspace-gws-drive/lockfile

Test it

Using "gws-drive". List non-trashed PDF files modified this week in the Finance folder.

Expected outcome:

Quarterly Forecast.pdf, modified August 4, owned by Finance Operations.
Expense Policy.pdf, modified August 2, owned by Workplace Services.
Two matching files found. No Drive content was changed.

Using "gws-drive". Review who can edit the project brief and suggest least-privilege changes.

Expected outcome:

The review found three editors and one domain-wide viewer. It recommends retaining project leads and removing obsolete access after confirmation.

Using "gws-drive". Export the presentation as a PDF and summarize the result.

Expected outcome:

The presentation was exported as a PDF within the documented size limit. The response includes the destination and exported file size.

Security Audit

Medium Risk

v5 • 8/5/2026 Open versioned report

All 111 static findings are false positives caused by Markdown formatting, documentation links, relative sibling references, and Drive API method descriptions. No prompt injection or malicious behavior appears, but consequential Drive mutations need explicit confirmation.

Files scanned

139

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:16 SKILL.md:38 SKILL.md:63 SKILL.md:88 SKILL.md:98 SKILL.md:101 SKILL.md:113

Consequential Drive Operations Need Confirmation

The skill lists approval, deletion, file update, permission change, and revision deletion methods without local confirmation requirements. Broad requests could cause data loss or access changes.

The methods are explicitly documented at the cited lines. Confidence is slightly reduced because line 16 delegates security rules to a sibling skill.

Risk Factors

⚙️ External commands (50)

🌐 Network access (46)

📁 Filesystem access (2)

SKILL.md:16 SKILL.md:26

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/googleworkspace-gws-drive/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/googleworkspace-gws-drive/security.svg)](https://skillstore.io/skills/googleworkspace-gws-drive?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/googleworkspace-gws-drive?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/googleworkspace-gws-drive/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/googleworkspace-gws-drive.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

googleworkspace. (2026). gws-drive security audit report (audit version 5) [Author version 0.23.0]. Skillstore. https://skillstore.io/skills/googleworkspace-gws-drive/audits/5

BibTeX citation

@techreport{googleworkspace-googleworkspace-gws-drive-2026,
  author = {googleworkspace},
  title = {gws-drive security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/googleworkspace-gws-drive/audits/5},
  note = {Author version 0.23.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "gws-drive security audit report (audit version 5)"
version: "0.23.0"
type: report
authors:
  - name: "googleworkspace"
date-released: "2026-08-05"
url: "https://skillstore.io/skills/googleworkspace-gws-drive/audits/5"
identifiers:
  - type: other
    value: "skillstore:googleworkspace-gws-drive:audit:5"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Organize Team Files

Find files, inspect metadata, create folders, and update selected items in a team workspace.

Review Sharing Access

List permissions and pending access proposals before applying approved sharing changes.

Automate Content Workflows

Monitor Drive changes, export documents, and manage comments for connected business processes.

Try These Prompts

Find Recent Files

List non-trashed files modified after [date]. Return each name, type, owner, modified time, and file ID.

Inspect a Shared Drive

Inspect shared drive [drive ID]. Summarize its metadata and list matching files using query [query]. Do not change anything.

Prepare Permission Changes

Review permissions for [file ID]. Propose changes for [people or groups], explain access impact, and wait for confirmation before applying them.

Build a Change Monitor

Inspect the Drive change methods, obtain the required page token, and plan notifications for [scope]. Confirm channel settings before creating the watch.

Best Practices

Inspect each method schema before building parameters or request data.
Use narrow fields and search queries to reduce returned Drive data.
Preview consequential changes and obtain explicit confirmation before execution.

Avoid

Do not list every file when a narrow query can answer the request.
Do not delete revisions, comments, permissions, or files without explicit confirmation.
Do not assume the authenticated account can access every shared drive.

Frequently Asked Questions

What does this skill require?

It requires the gws CLI, Google authentication, suitable scopes, and access to the relevant Drive resources.

Can it upload local files?

The skill references a separate upload helper that handles file uploads and metadata.

Can it manage shared drives?

Yes. It documents creating, listing, inspecting, hiding, restoring, and updating shared drives.

Can it change file permissions?

Yes. It supports permission creation, inspection, updates, and deletion when the authenticated user is authorized.

Does it support downloads and exports?

Yes. It documents file downloads and Workspace document exports, including the 10 MB export limit.

How should destructive operations be handled?

Review the target and expected impact, then obtain explicit user confirmation before any deletion or access change.

Developer Details

Author

googleworkspace

License

MIT

Author version

v0.23.0

Skillstore revision

Version notice

The author-declared version is lower than the previous observed version.

Repository

https://github.com/googleworkspace/cli/tree/main/skills/gws-drive/

Ref

286d37c9c189ddd1aafd3548415fb031d1df79d5

Maintenance freshness

8/6/2026

Usage

6 downloads · 96 views

File structure

📄 SKILL.md