Skills gws-gmail-watch

📦

gws-gmail-watch

Name: gws-gmail-watch
Author: googleworkspace

v0.23.0 Content revision r2 Safe ⚙️ External commands📁 Filesystem access

Monitor Gmail Messages with Pub/Sub

New Gmail messages are difficult to monitor continuously through manual checks. This skill streams incoming messages as NDJSON through Google Cloud Pub/Sub.

Supports: Claude Codex Code(CC)

🥈 80 Silver

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "gws-gmail-watch" from https://skillstore.io/skills/googleworkspace-gws-gmail-watch.md and its manifest at https://skillstore.io/api/skills/googleworkspace-gws-gmail-watch/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/googleworkspace-gws-gmail-watch.md Signed manifest GET /api/skills/googleworkspace-gws-gmail-watch/manifest Signed lockfile GET /api/skills/googleworkspace-gws-gmail-watch/lockfile

Test it

Using "gws-gmail-watch". Watch the INBOX label once in project mail-automation.

Expected outcome:

The watcher connects through the project, pulls one batch of inbox messages, emits each result as NDJSON, and exits.

Using "gws-gmail-watch". Use my existing subscription and store each full message in the emails directory.

Expected outcome:

The watcher uses the supplied subscription, streams full message records, and writes each message to a separate file in the selected directory.

Using "gws-gmail-watch". Watch continuously and clean up resources when stopped.

Expected outcome:

The watcher polls until interrupted, stops gracefully, and removes the Pub/Sub resources created for the session.

Security Audit

Safe

v7 • 8/5/2026 Open versioned report

All 17 static findings are false positives caused by Markdown code formatting and fixed sibling documentation links. The reviewed skill contains no shell backtick execution, path traversal behavior, prompt injection, or malicious intent.

Files scanned

Lines analyzed

Review items

False positives ignored

Risk Factors

⚙️ External commands (14)

SKILL.md:16 SKILL.md:22-24 SKILL.md:24-30 SKILL.md:30-31 SKILL.md:31-32 SKILL.md:32-33 SKILL.md:33-34 SKILL.md:34-35 SKILL.md:35-36 SKILL.md:36-37 SKILL.md:37-38 SKILL.md:38-39 SKILL.md:39-43 SKILL.md:43-48

📁 Filesystem access (3)

SKILL.md:16 SKILL.md:58 SKILL.md:59

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/googleworkspace-gws-gmail-watch/audits/7?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/googleworkspace-gws-gmail-watch/security.svg)](https://skillstore.io/skills/googleworkspace-gws-gmail-watch?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/googleworkspace-gws-gmail-watch?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/googleworkspace-gws-gmail-watch/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/googleworkspace-gws-gmail-watch.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

googleworkspace. (2026). gws-gmail-watch security audit report (audit version 7) [Author version 0.23.0]. Skillstore. https://skillstore.io/skills/googleworkspace-gws-gmail-watch/audits/7

BibTeX citation

@techreport{googleworkspace-googleworkspace-gws-gmail-watch-2026,
  author = {googleworkspace},
  title = {gws-gmail-watch security audit report (audit version 7)},
  institution = {Skillstore},
  year = {2026},
  number = {7},
  url = {https://skillstore.io/skills/googleworkspace-gws-gmail-watch/audits/7},
  note = {Author version 0.23.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "gws-gmail-watch security audit report (audit version 7)"
version: "0.23.0"
type: report
authors:
  - name: "googleworkspace"
date-released: "2026-08-05"
url: "https://skillstore.io/skills/googleworkspace-gws-gmail-watch/audits/7"
identifiers:
  - type: other
    value: "skillstore:googleworkspace-gws-gmail-watch:audit:7"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Monitor an Operations Inbox

Stream new inbox messages into an event-processing workflow with controlled polling and batch sizes.

Test Gmail Automations

Pull one batch of labeled messages to verify an integration without running a continuous watcher.

Archive Incoming Messages

Write each watched message to a separate file for approved review or retention workflows.

Try These Prompts

Watch New Gmail Messages

Watch for new Gmail messages using my authenticated gws setup and stream the results as NDJSON.

Watch a Specific Label

Watch Gmail messages with the INBOX label in project [PROJECT_ID]. Pull one batch, then stop.

Use an Existing Subscription

Watch Gmail through Pub/Sub subscription [SUBSCRIPTION_NAME]. Use metadata format, pull up to [COUNT] messages, and poll every [SECONDS] seconds.

Persist and Clean Up

Watch labeled Gmail messages in project [PROJECT_ID]. Write each message to [OUTPUT_DIRECTORY], then remove resources created by this session on exit.

Best Practices

Use the narrowest Gmail labels and message format required for the workflow.
Protect output files because full Gmail messages can contain sensitive information.
Use an existing Pub/Sub subscription when resource lifecycle is managed elsewhere.

Avoid

Do not enable cleanup when other workflows depend on the created Pub/Sub resources.
Do not store full messages in a broadly accessible directory.
Do not assume the watch remains active beyond seven days.

Frequently Asked Questions

What does this skill monitor?

It monitors new Gmail messages and streams their data as NDJSON.

Does it require a Google Cloud project?

A project is needed for setup unless you provide an existing Pub/Sub subscription or prepared topic.

Can I watch only selected messages?

Yes. Use Gmail label IDs such as INBOX or UNREAD to limit the watch.

Can it run only once?

Yes. Single-pull mode retrieves one batch and then exits.

Where can message data be stored?

The default output is an NDJSON stream. An output directory can store each message in a separate file.

How long does a Gmail watch last?

A Gmail watch expires after seven days. Run the command again to renew it.

Developer Details

Author

googleworkspace

License

MIT

Author version

v0.23.0

Skillstore revision

Repository

https://github.com/googleworkspace/cli/tree/main/skills/gws-gmail-watch/

Ref

286d37c9c189ddd1aafd3548415fb031d1df79d5

Maintenance freshness

8/6/2026

Usage

5 downloads · 85 views

File structure

📄 SKILL.md