google-workspace-cli

Name: google-workspace-cli
Author: borghei

github.com/borgheiCloud & DevOps1.0k63 installsUpdated 6d ago

About google-workspace-cli

A skill for Google Workspace administrators that audits configuration exports, creates API authentication setup guides, and diagnoses common configuration issues. Its tools cover security settings, DNS and transport checks, and integration health.

Key features

01Workspace security configuration audits
02OAuth and service-account setup guides
03API scope and delegation documentation
04DNS, SSL/TLS, and integration diagnostics
05Human-readable or JSON output

Use cases

01Audit exported Workspace settings
02Prepare API authentication instructions
03Check DNS and email configuration
04Diagnose integration or configuration conflicts

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/borghei/claude-skills --skill google-workspace-cli

After installing, type/google-workspace-cliin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

references/

gws-admin-guide.md

scripts/

auth_setup_guide.py

gws_doctor.py

workspace_audit.py

Details

From the project README

Google Workspace CLI

Category: Engineering Domain: Google Workspace Administration

Overview

The Google Workspace CLI skill provides tools for auditing Google Workspace configurations, generating authentication setup documentation, and diagnosing common GWS issues. It helps IT administrators maintain secure, well-configured Workspace environments without needing to navigate complex admin consoles.

Clarify First

Before running, confirm these inputs. If any is unknown or vague, ASK — do not assume:

Task — security audit, auth setup guide, or diagnostics (selects workspace_audit.py vs auth_setup_guide.py vs gws_doctor.py)
Config export or auth method — the GWS config JSON to audit, or the auth method and scopes for a setup guide (sets --config or --method/--scopes)
Output mode — human-readable vs JSON for automation (sets --format json)

Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact.

Quick Start

# Audit Workspace security configuration
python scripts/workspace_audit.py --config gws-config.json

# Generate auth setup guide
python scripts/auth_setup_guide.py --method oauth --scopes admin,drive

# Run diagnostics
python scripts/gws_doctor.py --check all

# JSON output for automation
python scripts/workspace_audit.py --config gws-config.json --format json

Tools Overview

workspace_audit.py

Audits Google Workspace configuration exports for security best practices.

Feature	Description
2FA enforcement	Checks if 2-step verification is required
Password policy	Validates password strength requirements
Sharing settings	Reviews external sharing configurations
App access	Checks third-party app access policies
Admin roles	Reviews admin role assignments
Mobile management	Checks device management policies
Drive settings	Validates Drive sharing and access controls

auth_setup_guide.py

Generates step-by-step authentication setup documentation for GWS API access.

Feature	Description
OAuth setup	Generates OAuth 2.0 configuration guide
Service account	Creates service account setup documentation
API scopes	Lists required scopes for each API
Domain delegation	Documents domain-wide delegation setup
Testing guide	Provides verification steps

gws_doctor.py

Diagnostic tool for common Google Workspace configuration issues.

Feature	Description
DNS checks	Validates MX, SPF, DKIM, DMARC records format
SSL/TLS	Checks certificate and transport security settings
Integration health	Validates common integration patterns
Config consistency	Checks for conflicting settings
Best practices	Compares against GWS recommended settings

Workflows

Security Audit Workflow

Export config - Export GWS settings to JSON via Admin SDK or manual export
Audit - Run workspace_audit.py against the config file
Review findings - Prioritize critical security gaps
Remediate - Apply recommended settings in Admin Console
Re-audit - Verify changes resolved findings

API Setup Workflow

Plan - Determine which APIs and scopes are needed
Generate guide - Run auth_setup_guide.py with desired method
Follow steps - Create credentials in Google Cloud Console
Configure - Set up domain delegation if needed
Verify - Test API access with provided verification steps

Health Check Workflow

Run diagnostics - Execute gws_doctor.py with all checks
Review results - Check DNS, email, and integration health
Fix issues - Address failures in priority order
Re-check - Verify fixes pass diagnostics

Regular Maintenance

# Monthly security audit
python scripts/workspace_audit.py --config gws-export.json --format json > audit_$(date +%Y%m).json

# Weekly health check
python scripts/gws_doctor.py --check dns,email --format json

Reference Documentation

GWS Admin Guide - Security settings, API configuration, DNS requirements

Common Patterns Quick Reference

Security Priorities

Setting	Priority	Impact
2FA enforcement	Critical	Prevents account takeover
Password policy	Critical	Reduces credential attacks
External sharing	High	Prevents data leakage
App access control	High	Limits third-party risk
Mobile management	Medium	Secures device access
Admin role review	Medium	Limits privilege exposure

DNS Records for Email

Record	Purpose	Example
MX	Email routing	`ASPMX.L.GOOGLE.COM`
SPF	Sender verification	`v=spf1 include:_spf.google.com ~all`
DKIM	Email signing	Domain-specific CNAME
DMARC	Policy enforcement	`v=DMARC1; p=reject; rua=mailto:...`

API Scopes

API	Scope	Purpose
Admin SDK	`admin.directory.user`	User management
Drive	`drive.readonly`	File listing
Gmail	`gmail.settings.basic`	Email settings
Calendar	`calendar.readonly`	Calendar access

Common Issues

Issue	Symptom	Fix
No 2FA	Account takeover risk	Enable 2FA enforcement
Weak passwords	Credential stuffing	Set 12+ char minimum
Open sharing	Data leakage	Restrict external sharing
No DMARC	Email spoofing	Add DMARC DNS record
Stale admins	Excessive privileges	Review admin roles quarterly

Comments

Markdown supported

Details

Author: borghei
Repository: borghei/claude-skills
Category: Cloud & DevOps
Installs: 63
GitHub stars: 1,011

Report

More skills

All skills

lark-apps

open.feishu.cn

739.5k

Develop and host Miaoda (Spark/Miaoda) apps: app creation, local full-stack development, cloud generation and iteration, creative design (UI mockups / interactive prototypes / wireframes / landing pages / dashboards / slide decks / visual exploration), integration of AI-related capabilities, Feishu platform capabilities, or other external capabilities; log/Trace/monitoring metric/PV/UV queries; environment variable management; app collaborators and collaboration permissions; app roles and members; and automation triggers (scheduled / record changes / Webhook / Feishu approvals). Use when users want to develop or create a system, tool, platform, or app; develop locally or in the cloud, modify, deploy, publish, launch, or get a shareable link; create a page or website with HTML and deploy it to Miaoda; design, create a mockup, prototype, wireframe, PPT, deck, or visual exploration; or mention Miaoda/Spark/Miaoda apps (links like `/app/app_xxx` or `/page/<token>`, runtime domains like *.aiforce.cloud), app databases, app file storage, open API Keys, visibility, app collaborators/developer permissions, app roles/role members, production logs, API request volume, error volume, latency, traffic, environment variables, or setting up automation tasks, scheduled triggers, or approval-triggered automation for Miaoda apps. Not for regular cloud drive file uploads (lark-drive), Feishu document editing (lark-doc), or native slide creation (lark-slides).

wizard

github.com/mattpocock

576.6k

Generate an interactive bash wizard that walks a human through steps only they can perform. Use when provisioning infrastructure, setting up credentials or CI secrets, walking an unfamiliar third-party dashboard, or running a one-off migration or cutover. Don't invoke this for steps the agent can perform itself.

azure-prepare

github.com/microsoft

573.4k

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.

azure-ai

github.com/microsoft

572.8k

Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.