Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Google Workspace CLI · LeoYeAI | DecimalAI

Google Workspace CLI

SkillScore77Maintained

google-workspace-cli

Google Workspace administration via the gws CLI. Install, authenticate, and automate Gmail, Drive, Sheets, Calendar, Docs, Chat, and Tasks. Run security audits, execute 43 built-in recipes, and use 10 persona bundles. Use for Google Workspace admin, gws CLI setup, Gmail automation, Drive management, or Calendar scheduling.

DevOpsby LeoYeAI

Links this skill to your agents and keeps it current with the author’s updates.

Automatic

DevOps & SRE pack

1 · One-time — install the CLI (docs ↗)

pip install decimalai

2 · Get the skill — writes .claude/skills/google-workspace-cli/SKILL.md

decimalai skills pull google-workspace-cli --out .claude/skills/

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/google-workspace-cli/SKILL.md https://app.decimal.ai/s/google-workspace-cli/SKILL.md

Raw file: /s/google-workspace-cli/SKILL.md ↗ · machine-readable summary at /s/google-workspace-cli.json ↗

In productionGlobal

how this skill behaves on real traffic · last 30 days

No production data for this skill yet — usage numbers appear here once agents start running it.

Anonymized aggregate across every org using this skill — proof from real production use, not a demo.

Does this skill help? · Benchmark: with vs. withoutsign in to run this on your agents

22 test cases from the publisher’s eval.yaml · each run twice on gemini-3.6-flash — with the skill injected, then without · last run 54d ago

Yes — +73% lift · at higher cost+128% tokens0% turns77% of whole cases pass with skill (17/22)

Test case	Without → With	Effect	Δ tokens	Δ turns
case-12	✗→✓	▲ Improved	—	—
case-03	✗→✓	▲ Improved	—	—
case-01	✗→✓	▲ Improved	—	—
case-11	✗→✓	▲ Improved	—	—
case-15	✗→✓	▲ Improved	—	—

Showing 5 of 22 cases

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 7/30/2026

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

LeoYeAI / openclaw-master-skills

skills/cs-google-workspace-cli/SKILL.md

View on GitHub ↗

License MITImported 8/2/2026Version v1Bundled 10 files · scripts

Skill contents

scripts/

references/

assets/

SKILL.md

Google Workspace CLI

Expert guidance and automation for Google Workspace administration using the open-source gws CLI. Covers installation, authentication, 18+ service APIs, 43 built-in recipes, and 10 persona bundles for role-based workflows.

Quick Start

Check Installation

bash
# Verify gws is installed and authenticated
python3 scripts/gws_doctor.py

Send an Email

bash
gws gmail users.messages send me --to "team@company.com" \
  --subject "Weekly Update" --body "Here's this week's summary..."

List Drive Files

bash
gws drive files list --json --limit 20 | python3 scripts/output_analyzer.py --select "name,mimeType,modifiedTime" --format table

Installation

npm (recommended)

bash
npm install -g @anthropic/gws
gws --version

Cargo (from source)

bash
cargo install gws-cli
gws --version

Pre-built Binaries

Download from github.com/googleworkspace/cli/releases for macOS, Linux, or Windows.

Verify Installation

bash
python3 scripts/gws_doctor.py
# Checks: PATH, version, auth status, service connectivity

Authentication

OAuth Setup (Interactive)

bash
# Step 1: Create Google Cloud project and OAuth credentials
python3 scripts/auth_setup_guide.py --guide oauth

# Step 2: Run auth setup
gws auth setup

# Step 3: Validate
gws auth status --json

Service Account (Headless/CI)

bash
# Generate setup instructions
python3 scripts/auth_setup_guide.py --guide service-account

# Configure with key file
export GWS_SERVICE_ACCOUNT_KEY=/path/to/key.json
export GWS_DELEGATED_USER=admin@company.com
gws auth status

Environment Variables

bash
# Generate .env template
python3 scripts/auth_setup_guide.py --generate-env

| Variable | Purpose | |----------|---------| | GWS_CLIENT_ID | OAuth client ID | | GWS_CLIENT_SECRET | OAuth client secret | | GWS_TOKEN_PATH | Custom token storage path | | GWS_SERVICE_ACCOUNT_KEY | Service account JSON key path | | GWS_DELEGATED_USER | User to impersonate (service accounts) | | GWS_DEFAULT_FORMAT | Default output format (json/ndjson/table) |

Validate Authentication

bash
python3 scripts/auth_setup_guide.py --validate --json
# Tests each service endpoint

Workflow 1: Gmail Automation

Goal: Automate email operations — send, search, label, and filter management.

Send and Reply

bash
# Send a new email
gws gmail users.messages send me --to "client@example.com" \
  --subject "Proposal" --body "Please find attached..." \
  --attachment proposal.pdf

# Reply to a thread
gws gmail users.messages reply me --thread-id <THREAD_ID> \
  --body "Thanks for your feedback..."

# Forward a message
gws gmail users.messages forward me --message-id <MSG_ID> \
  --to "manager@company.com"

Search and Filter

bash
# Search emails
gws gmail users.messages list me --query "from:client@example.com after:2025/01/01" --json \
  | python3 scripts/output_analyzer.py --count

# List labels
gws gmail users.labels list me --json

# Create a filter
gws gmail users.settings.filters create me \
  --criteria '{"from":"notifications@service.com"}' \
  --action '{"addLabelIds":["Label_123"],"removeLabelIds":["INBOX"]}'

Bulk Operations

bash
# Archive all read emails older than 30 days
gws gmail users.messages list me --query "is:read older_than:30d" --json \
  | python3 scripts/output_analyzer.py --select "id" --format json \
  | xargs -I {} gws gmail users.messages modify me {} --removeLabelIds INBOX

Workflow 2: Drive & Sheets

Goal: Manage files, create spreadsheets, configure sharing, and export data.

File Operations

bash
# List files
gws drive files list --json --limit 50 \
  | python3 scripts/output_analyzer.py --select "name,mimeType,size" --format table

# Upload a file
gws drive files create --name "Q1 Report" --upload report.pdf \
  --parents <FOLDER_ID>

# Create a Google Sheet
gws sheets spreadsheets create --title "Budget 2026" --json

# Download/export
gws drive files export <FILE_ID> --mime "application/pdf" --output report.pdf

Sharing

bash
# Share with user
gws drive permissions create <FILE_ID> \
  --type user --role writer --emailAddress "colleague@company.com"

# Share with domain (view only)
gws drive permissions create <FILE_ID> \
  --type domain --role reader --domain "company.com"

# List who has access
gws drive permissions list <FILE_ID> --json

Sheets Data

bash
# Read a range
gws sheets spreadsheets.values get <SHEET_ID> --range "Sheet1!A1:D10" --json

# Write data
gws sheets spreadsheets.values update <SHEET_ID> --range "Sheet1!A1" \
  --values '[["Name","Score"],["Alice",95],["Bob",87]]'

# Append rows
gws sheets spreadsheets.values append <SHEET_ID> --range "Sheet1!A1" \
  --values '[["Charlie",92]]'

Workflow 3: Calendar & Meetings

Goal: Schedule events, find available times, and generate standup reports.

Event Management

bash
# Create an event
gws calendar events insert primary \
  --summary "Sprint Planning" \
  --start "2026-03-15T10:00:00" --end "2026-03-15T11:00:00" \
  --attendees "team@company.com" \
  --location "Conference Room A"

# List upcoming events
gws calendar events list primary --timeMin "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
  --maxResults 10 --json

# Quick event (natural language)
gws helpers quick-event "Lunch with Sarah tomorrow at noon"

Find Available Time

bash
# Check free/busy for multiple people
gws helpers find-time \
  --attendees "alice@co.com,bob@co.com,charlie@co.com" \
  --duration 60 --within "2026-03-15,2026-03-19" --json

Standup Report

bash
# Generate daily standup from calendar + tasks
gws recipes standup-report --json \
  | python3 scripts/output_analyzer.py --format table

# Meeting prep (agenda + attendee info)
gws recipes meeting-prep --event-id <EVENT_ID>

Workflow 4: Security Audit

Goal: Audit Google Workspace security configuration and generate remediation commands.

Run Full Audit

bash
# Full audit across all services
python3 scripts/workspace_audit.py --json

# Audit specific services
python3 scripts/workspace_audit.py --services gmail,drive,calendar

# Demo mode (no gws required)
python3 scripts/workspace_audit.py --demo

Audit Checks

| Area | Check | Risk | |------|-------|------| | Drive | External sharing enabled | Data exfiltration | | Gmail | Auto-forwarding rules | Data exfiltration | | Gmail | DMARC/SPF/DKIM records | Email spoofing | | Calendar | Default sharing visibility | Information leak | | OAuth | Third-party app grants | Unauthorized access | | Admin | Super admin count | Privilege escalation | | Admin | 2-Step verification enforcement | Account takeover |

Review and Remediate

bash
# Review findings
python3 scripts/workspace_audit.py --json | python3 scripts/output_analyzer.py \
  --filter "status=FAIL" --select "area,check,remediation"

# Execute remediation (example: restrict external sharing)
gws drive about get --json  # Check current settings
# Follow remediation commands from audit output

Python Tools

| Script | Purpose | Usage | |--------|---------|-------| | gws_doctor.py | Pre-flight diagnostics | python3 scripts/gws_doctor.py [--json] [--services gmail,drive] | | auth_setup_guide.py | Guided auth setup | python3 scripts/auth_setup_guide.py --guide oauth | | gws_recipe_runner.py | Recipe catalog & runner | python3 scripts/gws_recipe_runner.py --list [--persona pm] | | workspace_audit.py | Security/config audit | python3 scripts/workspace_audit.py [--json] [--demo] | | output_analyzer.py | JSON/NDJSON analysis | gws ... --json \| python3 scripts/output_analyzer.py --count |

All scripts are stdlib-only, support --json output, and include demo mode with embedded sample data.

Best Practices

Security

Use OAuth with minimal scopes — request only what each workflow needs
Store tokens in the system keyring, never in plain text files
Rotate service account keys every 90 days
Audit third-party OAuth app grants quarterly
Use --dry-run before bulk destructive operations

Automation

Pipe --json output through output_analyzer.py for filtering and aggregation
Use recipes for multi-step operations instead of chaining raw commands
Select a persona bundle to scope recipes to your role
Use NDJSON format (--format ndjson) for streaming large result sets
Set GWS_DEFAULT_FORMAT=json in your shell profile for scripting

Performance

Use --fields to request only needed fields (reduces payload size)
Use --limit to cap results when browsing
Use --page-all only when you need complete datasets
Batch operations with recipes rather than individual API calls
Cache frequently accessed data (e.g., label IDs, folder IDs) in variables

Limitations

| Constraint | Impact | |------------|--------| | OAuth tokens expire after 1 hour | Re-auth needed for long-running scripts | | API rate limits (per-user, per-service) | Bulk operations may hit 429 errors | | Scope requirements vary by service | Must request correct scopes during auth | | Pre-v1.0 CLI status | Breaking changes possible between releases | | Google Cloud project required | Free, but requires setup in Cloud Console | | Admin API needs admin privileges | Some audit checks require Workspace Admin role |

Required Scopes by Service

bash
# List scopes for specific services
python3 scripts/auth_setup_guide.py --scopes gmail,drive,calendar,sheets

| Service | Key Scopes | |---------|-----------| | Gmail | gmail.modify, gmail.send, gmail.labels | | Drive | drive.file, drive.metadata.readonly | | Sheets | spreadsheets | | Calendar | calendar, calendar.events | | Admin | admin.directory.user.readonly, admin.directory.group | | Tasks | tasks |

Illustrative Want to see what google-workspace-cli would put in front of your model? Preview the rendered body and check its trigger phrases — no LLM call, no signup.

Latest benchmark · publisher runVerified

7/30/2026, 05:45 UTC · 22 cases

Lift

+73%

77% vs 5%

Agent turns

1.0 vs 1.0

Tokens

+128%

3,624.36 vs 1,591.27

fail → pass · 16pass → pass · 1fail → fail · 5

Per-case results (22)

Case	Status	Duration (ms)			Turns			Tokens			Tool calls
Case	Status	Without	With	Δ	Without	With	Δ	Without	With	Δ	Without	With	Δ
case-07 I need to set up OAuth authentication for my command-line tool connection to Google Workspace. Is there a built-in interactive setup guide helper script available in our workspace toolkit to generate the OAuth setup instructions?	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—
case-12 I want to create a calendar event using natural language text like 'Lunch with Sarah tomorrow at noon' directly from the terminal without specifying explicit ISO timestamp flags. Which command helper provides this capability?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-04 We need to update our domain's DNS settings in AWS Route53 to add an SPF record 'v=spf1 include:_spf.google.com ~all' for Google Workspace email authentication. Please provide the aws cli command to update the record set.	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—
case-03 I need to schedule a 60-minute meeting with alice@co.com and bob@co.com for next week. Please check our availability in Google Calendar and report back with a list of available open time slots.	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-01 I need to run a security audit across our Google Workspace domain to catch vulnerabilities like external file sharing or auto-forwarding rules. Please run the audit tool and present a clear summary containing only the failing checks along with their remediation steps.	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-11 I want to set up an automated rule in Gmail to direct emails from notifications@service.com out of the inbox and attach label ID Label_123. How do I construct this settings filter via command line?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-15 I need to add a new row with data '["Charlie", 92]' to the end of sheet 'Sheet1' in Google Spreadsheet sheet_456. Which command appends these values?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-08 Before running our automated Google Workspace administrative tasks, I want to execute a pre-flight diagnostic check to verify environment PATH, auth status, and API service connectivity. Which script should I execute?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-14 I need to update the permissions on Google Drive file doc_789 so that all users within the 'company.com' domain can view it. What CLI command configures this domain-wide read permission?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-17 I want to test our security audit report formatting on a test machine where gws CLI is not yet installed or authenticated. Is there a way to run the audit script using mock data?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-18 I want to view all available automated workflow recipes targeted specifically for the 'pm' persona bundle. Which Python tool and CLI options list these recipes?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-19 I need to download a Google Doc with ID file_123 from Drive and export it locally as a PDF file named summary.pdf. What command line flags should be passed?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-02 My Gmail inbox is full of old messages. Can you find all read emails older than 30 days and clear them from my inbox, returning a count of how many items were updated?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-13 I need to upload a local PDF file named report.pdf to Google Drive, giving it the document title 'Q1 Report' and placing it inside a target parent folder with ID folder_xyz_123. Which command line invocation performs this upload?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-10 We just updated our authentication tokens. I want to validate that our credentials can successfully connect to each individual Google Workspace service API endpoint and output the result in JSON format. Which command achieves this?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-05 We need to grant our CI/CD pipeline service account the role 'roles/iam.serviceAccountTokenCreator' in Google Cloud Platform using gcloud. What is the command to apply this IAM policy binding?	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—
case-20 I have an upcoming meeting with event ID event_abc_99. I want to generate a preparation briefing sheet containing attendee information and event agenda. Which built-in recipe subcommand handles meeting preparation?	pass→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-16 I want to automatically generate a daily standup summary based on my calendar and tasks, outputting the result as a structured table. Which built-in workflow command and output formatter should be run?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-06 Our company uses Microsoft 365 and Exchange Online. I need to set up an inbox rule for user sarah@company.com to forward incoming messages containing 'Invoice' in the subject to billing@company.com using Exchange Online PowerShell.	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—
case-09 I am configuring a headless CI pipeline to run automated Google Workspace operations using a service account JSON key file located at /etc/gws/key.json to act on behalf of admin@company.com. Which environment variables should I export?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-21 I ran a query to search Gmail messages and received a JSON list output. I want to pipe this JSON into our workspace output utility to quickly count the total number of items returned. What flag should I pass to the analyzer?	fail→pass	—	—	—	—	—	—	—	—	—	—	—	—
case-22 What is the recommended maximum age before rotating service account JSON keys in Google Workspace administration best practices?	fail→fail	—	—	—	—	—	—	—	—	—	—	—	—

These cases were also screened by the skill’s intent / safety pass.See the Trust review ↗Reproduce this benchmark in Colab ↗

How this skill was measured

DecimalAI ran this skill against gemini-3.6-flash twice over the same eval suite — once with the skill loaded and once without — and compared the two runs case by case. 22 cases were attempted. The headline lift of +73 percentage points is the difference between those two pass rates over the 22 comparable cases.

Model measured: gemini-3.6-flash
Graded by: gemini-3.6-flash
Grading method: judged
Verification: verified
Pass rate without the skill: 4.6%
Pass rate with the skill: 77.3%
Cases attempted: 22
Cases counted toward lift: 22
Cases that regressed: 0
Skill version measured: v1
Run completed: 7/30/2026, 05:45 UTC

The per-case answers from this run were removed by the retention sweep, so the case table below shows the verdicts without the text either arm produced. The counts above were recorded at the time and are unaffected. Answers are now kept for 180 days.

SkillScore blends 4 signals1 of 4 complete

BenchmarkPass rate WITH skill on a verified run77

Live evalNeeds ≥10 evaluated traces in 30 days

AI ratingNeeds ≥10 rated traces

AdoptionNeeds ≥10 serves across ≥2 orgs in 30 days

Efficiency · separate axis (at equal correctness)+0% turns+273% tokens

Shown for transparency; not credited unless a verified run shows no correctness regression.

Backed by 1 of 4 signals — each added signal makes the score more robust.

Verified on gemini-3.6-flash · re-tested 53 days ago

Other measured skills in the registry, with their headline benchmark lift.

Ready to supercharge your AI agents?

Google Workspace CLI

SkillSafety

Source

Google Workspace CLI

Quick Start

Check Installation

Send an Email

List Drive Files

Installation

npm (recommended)

Cargo (from source)

Pre-built Binaries

Verify Installation

Authentication

OAuth Setup (Interactive)

Service Account (Headless/CI)

Environment Variables

Validate Authentication

Workflow 1: Gmail Automation

Send and Reply

Search and Filter

Bulk Operations

Workflow 2: Drive & Sheets

File Operations

Sharing

Sheets Data

Workflow 3: Calendar & Meetings

Event Management

Find Available Time

Standup Report

Workflow 4: Security Audit

Run Full Audit

Audit Checks

Review and Remediate

Python Tools

Best Practices

Security

Automation

Performance

Limitations

Required Scopes by Service

How this skill was measured

Related skills