Recipe Audit External Sharing
Analyzes Google Workspace recipe documents, flags external sharing risks, and suggests secure collaboration practices.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add recipe-audit-external-sharing npx -- -y @trustedskills/recipe-audit-external-sharing
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"recipe-audit-external-sharing": {
"command": "npx",
"args": [
"-y",
"@trustedskills/recipe-audit-external-sharing"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill audits Google Workspace recipes specifically for external sharing configurations. It identifies which recipes allow data to leave your organization and highlights potential security risks associated with those settings.
When to use it
- Before deploying new automation workflows that interact with customer or partner data.
- During a security review to ensure no sensitive internal information is inadvertently exposed externally.
- To verify compliance with data governance policies regarding cross-organization data access.
- When troubleshooting unexpected data leakage issues in automated Google Workspace processes.
Key capabilities
- Scans existing recipes for external sharing permissions.
- Identifies specific configurations that enable data export outside the organization.
- Provides a clear audit trail of sharing risks within recipe definitions.
Example prompts
- "Run an audit on all our active Google Workspace recipes to find any with external sharing enabled."
- "Check if the 'Customer Onboarding' recipe allows data to be shared with external domains."
- "List all recipes that currently permit cross-organization data access and flag them for review."
Tips & gotchas
Ensure you have administrative privileges in your Google Workspace environment before running this audit, as it requires deep inspection of recipe configurations. This tool focuses strictly on external sharing; it does not analyze internal permission hierarchies or other security vectors like API key exposure.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.