Audit candidate: googleworkspace/cli

[xiaolai]

Repo

https://github.com/googleworkspace/cli

Field	Value
Stars	25330
NL Artifacts	95
Discovery strategy	topic-tag
Topics: agent-skills

Next Steps

1. Review the repo — check CONTRIBUTING.md, recent activity, PR history
2. If worthy: add label audit-ready to trigger the audit workflow
3. If not: close this issue

Checklist

• Accepts contributions
• Updated in last 60 days
• Not a fork or mirror
• Has meaningful NL artifacts

[github-actions]

Audit Complete: googleworkspace/cli

NL Score: 99/100 | Security: REVIEW | Artifacts: 96 | Strategy: progressive

NLPM Audit: googleworkspace/cli

Date: 2026-04-06 | Artifacts: 96 | Strategy: progressive
NL Score: 99/100
Security: REVIEW
Bugs: 2 | Quality Issues: 10 | Security Findings: 3

NL Score Summary

File	Type	Score	Top Issue
skills/recipe-collect-form-responses/SKILL.md	recipe	88	Step 1 calls gws forms forms list — list not in Forms API
skills/recipe-post-mortem-setup/SKILL.md	recipe	88	Step 1 uses --title/--body; gws-docs-write requires --document/--text
skills/gws-modelarmor/SKILL.md	api-skill	95	No API Resources section — raw API surface undiscoverable
skills/recipe-compare-sheet-tabs/SKILL.md	recipe	95	Step 3 has no concrete CLI command
skills/recipe-create-events-from-sheet/SKILL.md	recipe	95	Step 2 implies row loop but shows only one hardcoded example
skills/recipe-draft-email-from-doc/SKILL.md	recipe	95	Step 2 is manual-only ("copy the text") — no CLI command
skills/recipe-find-large-files/SKILL.md	recipe	95	Step 2 has no concrete action command
skills/recipe-review-overdue-tasks/SKILL.md	recipe	95	Step 3 has no concrete action command
skills/recipe-create-doc-from-template/SKILL.md	recipe	98	Uses --document-id; gws-docs-write documents --document
skills/recipe-create-shared-drive/SKILL.md	recipe	98	"appropriate roles" vague quantifier in description
skills/recipe-generate-report-from-sheet/SKILL.md	recipe	98	Uses --document-id; gws-docs-write documents --document
skills/recipe-save-email-to-doc/SKILL.md	recipe	98	Uses --document-id; gws-docs-write documents --document
CLAUDE.md	project-instruction	100	—
skills/gws-admin-reports/SKILL.md	api-skill	100	—
skills/gws-calendar-agenda/SKILL.md	helper-skill	100	—
skills/gws-calendar-insert/SKILL.md	helper-skill	100	—
skills/gws-calendar/SKILL.md	api-skill	100	—
skills/gws-chat-send/SKILL.md	helper-skill	100	—
skills/gws-chat/SKILL.md	api-skill	100	—
skills/gws-classroom/SKILL.md	api-skill	100	—
skills/gws-docs-write/SKILL.md	helper-skill	100	—
skills/gws-docs/SKILL.md	api-skill	100	—
skills/gws-drive-upload/SKILL.md	helper-skill	100	—
skills/gws-drive/SKILL.md	api-skill	100	—
skills/gws-events-renew/SKILL.md	helper-skill	100	—
skills/gws-events-subscribe/SKILL.md	helper-skill	100	—
skills/gws-events/SKILL.md	api-skill	100	—
skills/gws-forms/SKILL.md	api-skill	100	—
skills/gws-gmail-forward/SKILL.md	helper-skill	100	—
skills/gws-gmail-read/SKILL.md	helper-skill	100	—
skills/gws-gmail-reply-all/SKILL.md	helper-skill	100	—
skills/gws-gmail-reply/SKILL.md	helper-skill	100	—
skills/gws-gmail-send/SKILL.md	helper-skill	100	—
skills/gws-gmail-triage/SKILL.md	helper-skill	100	—
skills/gws-gmail-watch/SKILL.md	helper-skill	100	—
skills/gws-gmail/SKILL.md	api-skill	100	—
skills/gws-keep/SKILL.md	api-skill	100	—
skills/gws-meet/SKILL.md	api-skill	100	—
skills/gws-modelarmor-create-template/SKILL.md	helper-skill	100	—
skills/gws-modelarmor-sanitize-prompt/SKILL.md	helper-skill	100	—
skills/gws-modelarmor-sanitize-response/SKILL.md	helper-skill	100	—

---

Full report: https://github.com/xiaolai/nlpm-for-claude/blob/main/auditor/audits/googleworkspace-cli.md

4 bug(s) found. To submit fix PRs to the target repo, add the contribute-approved label to this issue.

[xiaolai]

Contribution report: googleworkspace/cli

Audit completed (score: 99/100 across 96 skill files). Submitted 4 PRs and 1 tracking issue.

Pull Requests

PR	Description	Type
googleworkspace/cli#757	Fix recipe-post-mortem-setup: replace invalid --title/--body flags with correct --document/--text flow	Bug
googleworkspace/cli#758	Fix recipe-collect-form-responses: replace nonexistent gws forms forms list with Drive API query	Bug
googleworkspace/cli#759	Add --locked to cargo install cargo-llvm-cov in coverage.sh	Security (Medium)
googleworkspace/cli#760	Pin devDependencies to exact versions in package.json	Security (Low)

Tracking Issue

googleworkspace/cli#761 — full audit summary with all findings, priority, and PR links.

[github-actions]

All PRs resolved. 0 merged, 4 applied-separately, 0 rejected. Ready for case study.

[github-actions]

Case study published: case-studies/2026-05-01-googleworkspace-cli.md — googleworkspace/cli: original audit 99/100 (16 findings, 2 recipe bugs, 4 CLA-blocked PRs); re-audit at the same commit scored 89/100 with all 16 original findings "fixed" and 121 new findings introduced — a concrete demonstration of scoring drift with no code changes.