Agent skill · Audited from source
gws-classroom
skill · googleworkspace/cliApache-2.0 licenceAudited 28 Oct 2026 · source bcdfbd3e9abf
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit bcdfbd3e9abf and found no filesystem, network or shell access and no hard-coded secrets. What it does: Google Classroom: Manage classes, rosters, and coursework.
Cite
Cite this page
ModelsAtlas. “gws-classroom (googleworkspace/cli)”. Retrieved 28 Oct 2026. https://modelsatlas.com/skills/googleworkspace/gws-classroom
Trust audit
Audit 0.4.1 · source read 28 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (0)
No findings at any severity. We re-audit when the source changes.
Audit 0.4.1 · source sha bcdfbd3e9abf · 28 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publishergoogleworkspace GitHub organizationOwner of the repository this skill is read from
- Source foldergoogleworkspace/cli/skills/gws-classroomThe exact folder we audited
- LicenceApache-2.0As the repository states it
- Commit pinned for this verdictbcdfbd3e9abfA new audit runs when the source changes
- Repository statusNot archivedLast push 1 day ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Google Classroom: Manage classes, rosters, and coursework.
---
name: gws-classroom
description: "Google Classroom: Manage classes, rosters, and coursework."
metadata:
version: 0.22.5
openclaw:
category: "productivity"
requires:
bins:
- gws
cliHelp: "gws classroom --help"
---
# classroom (v1)
> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.
```bash
gws classroom <resource> <method> [flags]
```
## API Resources
### courses
- `create` — Creates a course. The user specified in `ownerId` is the owner of the created course and added as a teacher. A non-admin requesting user can only create a course with themselves as the owner. Domain admins can create courses owned by any user within their domain. This method returns the following error codes: * `PERMISSION_DENIED` if the requesting user is not permitted to create courses or for access errors. * `NOT_FOUND` if the primary teacher is not a valid user.
- `delete` — Deletes a course. This method returns the following error codes: * `PERMISSION_DENIED` if the requesting user is not permitted to delete the requested course or for access errors. * `NOT_FOUND` if no course exists with the requested ID.
- `get` — Returns a course. This method returns the following error codes: * `PERMISSION_DENIED` if the requesting user is not permitted to access the requested course or for access errors. * `NOT_FOUND` if no course exists with the requested ID.
- `getGradingPeriodSettings` — Returns the grading period settings in a course. This method returns the following error codes: * `PERMISSION_DENIED` if the requesting user isn't permitted to access the grading period settings in the requested course or for access errors. * `NOT_FOUND` if the requested course does not exist.
- `list` — Returns a list of courses that the requesting user is permitted to view, restricted to those that match the request. Returned courses are ordered by creation time, with the most recently created coming first. This method returns the following error codes: * `PERMISSION_DENIED` for access errors. * `INVALID_ARGUMENT` if the query argument is malformed. * `NOT_FOUND` if any users specified in the query arguments do not exist.
- `patch` — Updates one or more fields in a course. This method returns the following error codes: * `PERMISSION_DENIED` if the requesting user is not permitted to modify the requested course or for access errors. * `NOT_FOUND` if no course exists with the requested ID. * `INVALID_ARGUMENT` if invalid fields are specified in the update mask or if no update mask is supplied.
- `update` — Updates a course. This method returns the following error codes: * `PERMISSION_DENIED` if the requesting user is not permitted to modify the requested course or for access errors. * `NOT_FOUND` if no course exists with the requested ID. * `FAILED_PRECONDITION` for the following request errors: * CourseNotModifiable * CourseTitleCannotContainUrl
- `updateGradingPeriodSettings` — Updates grading period settings of a course. Individual grading periods can be added, removed, or modified using this method. The requesting user and course owner must be eligible to modify Grading Periods. For details, see [licensing requirements](https://developers.google.com/workspace/classroom/grading-periods/manage-grading-periods#licensing_requirements).
- `aliases` — Operations on the 'aliases' resource
- `announcements` — Operations on the 'announcements' resource
- `courseWork` — Operations on the 'courseWork' resource
- `courseWorkMaterials` — Operations on the 'courseWorkMaterials' resource
- `posts` — Operations on the 'posts' resource
- `studentGroups` — Operations on the 'studentGroups' resource
- `students` — Operations on the 'students' resource
- `teachers` — Operations on the 'teachers' resource
- `topics` — Operations on the 'topics' resource
### invitations
- `accept` — Accepts an invitation, removing it and adding the invited user to the teachers or students (as appropriate) of the specified course. Only the invited user may accept an invitation. This method returns the following error codes: * `PERMISSION_DENIED` if the requesting user is not permitted to accept the requested invitation or for access errors.
- `create` — Creates an invitation. Only one invitation for a user and course may exist at a time. Delete and re-create an invitation to make changes. This method returns the following error codes: * `PERMISSION_DENIED` if the requesting user is not permitted to create invitations for this course or for access errors. * `NOT_FOUND` if the course or the user does not exist. * `FAILED_PRECONDITION`: * if the requested user's account is disabled.
- `delete` — Deletes an invitation. This method returns the following error codes: * `PERMISSION_DENIED` if the requesting user is not permitted to delete the requested invitation or for access errors. * `NOT_FOUND` if no invitation exists with the requested ID.
- `get` — Returns an invitation. This method returns the following error codes: * `PERMISSION_DENIED` if the requesting user is not permitted to view the requested invitation or for access errors. * `NOT_FOUND` if no invitation exists with the requested ID.
- `list` — Returns a list of invitations that the requesting user is permitted to view, restricted to those that match the list request. *Note:* At least one of `user_id` or `course_id` must be supplied. Both fields can be supplied. This method returns the following error codes: * `PERMISSION_DENIED` for access errors.
### registrations
- `create` — Creates a `Registration`, causing Classroom to start sending notifications from the provided `feed` to the destination provided in `cloudPubSubTopic`. Returns the created `Registration`. Currently, this will be the same as the argument, but with server-assigned fields such as `expiry_time` and `id` filled in. Note that any value specified for the `expiry_time` Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit bcdfbd3
git clone https://github.com/googleworkspace/cli git -C cli checkout bcdfbd3e9abf
The author documents no install command, so this uses the repository directly. Our verdict covers commit bcdfbd3e9abf only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| OpenClaw | Mentioned in its text, not tested | Skills for OpenClaw · About OpenClaw |
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
bcdfbd3e9abf
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/googleworkspace/gws-classroom/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All automation skills →googleworkspace/cli
Read and write Google Docs.
googleworkspace/cli
Google Chat: Send a message to a space.
googleworkspace/cli
Google Chat: Manage Chat spaces and messages.
googleworkspace/cli
Google Calendar: Create a new event.
googleworkspace/cli
Google Calendar: Show upcoming events across all calendars.
googleworkspace/cli
Google Calendar: Manage calendars and events.
Add this badge to your README
[](https://modelsatlas.com/skills/googleworkspace/gws-classroom/)
<a href="https://modelsatlas.com/skills/googleworkspace/gws-classroom/"><img src="https://modelsatlas.com/skills/googleworkspace/gws-classroom/badge.svg" alt="ModelsAtlas: SAFE B"></a>
Questions about gws-classroom
What does the gws-classroom skill do?
Is gws-classroom safe to install?
What can gws-classroom access on my machine?
Which assistants does gws-classroom work with?
How current is this page?
Sources
- github.com/googleworkspace/cli/tree/main/skills/gws-classroom — the audited source at commit bcdfbd3e9abf and every finding aboveObserved · 28 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the gws-classroom skill do?
- Is gws-classroom safe to install?
- What can gws-classroom access on my machine?