Gws Vault

The gws-vault skill enables AI agents to securely manage Google Workspace credentials and secrets within the googleworkspace/cli environment. It acts as a centralized vault, allowing agents to retrieve stored authentication tokens and API keys without exposing them in logs or prompts.

When to use it

• Automating repetitive administrative tasks that require persistent access to Google Drive, Gmail, or Calendar APIs.
• Managing sensitive service account credentials for internal bots or integration scripts.
• Ensuring secure credential handling when deploying AI agents to production Google Workspace environments.
• Avoiding the need to hardcode API keys directly into agent configuration files or prompt contexts.

Key capabilities

• Secure storage and retrieval of Google Workspace authentication secrets.
• Integration with the googleworkspace/cli toolchain for seamless execution.
• Protection of sensitive data by preventing plaintext exposure during agent operations.

Example prompts

• "Retrieve my stored service account key from the vault to connect to the Drive API."
• "Update the credentials in gws-vault for the new marketing automation bot."
• "List all active Google Workspace secrets currently managed in this vault."

Tips & gotchas

Ensure your AI agent has the necessary permissions to read or write to the specific vault instance before attempting credential retrieval. Always verify that the googleworkspace/cli is correctly initialized and authenticated before invoking vault operations, as the skill relies on an existing secure session context.