gws-chat
Google Chat: Manage Chat spaces and messages.
86/100
Security score
The gws-chat skill was audited on Mar 8, 2026 and we found 14 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
low line 31
External URL reference
SourceSKILL.md
| 31 | - `create` — Creates a custom emoji. Custom emojis are only available for Google Workspace accounts, and the administrator must turn custom emojis on for the organization. For more information, see [L |
low line 32
External URL reference
SourceSKILL.md
| 32 | - `delete` — Deletes a custom emoji. By default, users can only delete custom emoji they created. [Emoji managers](https://support.google.com/a/answer/12850085) assigned by the administrator can delet |
low line 33
External URL reference
SourceSKILL.md
| 33 | - `get` — Returns details about a custom emoji. Custom emojis are only available for Google Workspace accounts, and the administrator must turn custom emojis on for the organization. For more informat |
low line 34
External URL reference
SourceSKILL.md
| 34 | - `list` — Lists custom emojis visible to the authenticated user. Custom emojis are only available for Google Workspace accounts, and the administrator must turn custom emojis on for the organization. |
low line 39
External URL reference
SourceSKILL.md
| 39 | - `upload` — Uploads an attachment. For an example, see [Upload media as a file attachment](https://developers.google.com/workspace/chat/upload-media-attachments). |
low line 43
External URL reference
SourceSKILL.md
| 43 | - `completeImport` — Completes the [import process](https://developers.google.com/workspace/chat/import-data) for the specified space and makes it visible to users. |
low line 44
External URL reference
SourceSKILL.md
| 44 | - `create` — Creates a space. Can be used to create a named space, or a group chat in `Import mode`. For an example, see [Create a space](https://developers.google.com/workspace/chat/create-spaces). |
low line 45
External URL reference
SourceSKILL.md
| 45 | - `delete` — Deletes a named space. Always performs a cascading delete, which means that the space's child resources—like messages posted in the space and memberships in the space—are also deleted. Fo |
low line 46
External URL reference
SourceSKILL.md
| 46 | - `findDirectMessage` — Returns the existing direct message with the specified user. If no direct message space is found, returns a `404 NOT_FOUND` error. For an example, see [Find a direct message](/ |
low line 47
External URL reference
SourceSKILL.md
| 47 | - `get` — Returns details about a space. For an example, see [Get details about a space](https://developers.google.com/workspace/chat/get-spaces). |
low line 48
External URL reference
SourceSKILL.md
| 48 | - `list` — Lists spaces the caller is a member of. Group chats and DMs aren't listed until the first message is sent. For an example, see [List spaces](https://developers.google.com/workspace/chat/lis |
low line 49
External URL reference
SourceSKILL.md
| 49 | - `patch` — Updates a space. For an example, see [Update a space](https://developers.google.com/workspace/chat/update-spaces). If you're updating the `displayName` field and receive the error message |
low line 50
External URL reference
SourceSKILL.md
| 50 | - `search` — Returns a list of spaces in a Google Workspace organization based on an administrator's search. In the request, set `use_admin_access` to `true`. For an example, see [Search for and manag |
low line 51
External URL reference
SourceSKILL.md
| 51 | - `setup` — Creates a space and adds specified users to it. The calling user is automatically added to the space, and shouldn't be specified as a membership in the request. For an example, see [Set up |
Scanned on Mar 8, 2026
View Security Dashboard