gws-admin-reports

What This Skill Does

The gws-admin-reports skill acts as an interface for the Google Workspace Admin SDK Reports API, enabling administrators to extract detailed logs and analytics directly through the OpenClaw agent. This tool bridges the gap between raw API complexity and actionable insights by allowing users to query activities (audit logs), customerUsageReports, entityUsageReports, and userUsageReport via a command-line interface. By leveraging this skill, you can audit administrative actions, track security-sensitive events like Drive file modifications or login attempts, and monitor overall organizational consumption patterns. It supports granular filtering, enabling you to pinpoint specific users or applications within your Google Workspace environment.

Installation

To integrate this skill into your OpenClaw environment, execute the following command in your terminal:

clawhub install openclaw/skills/skills/googleworkspace-bot/gws-admin-reports

Ensure that the parent gws-shared module is configured according to the prerequisites in ../gws-shared/SKILL.md. This setup is critical for handling OAuth2 authentication, global flags, and organizational security policies. If the shared configuration is missing, use gws generate-skills to scaffold the necessary environment files.

Use Cases

• Security Auditing: Monitor administrator activities or suspicious login events across the domain to detect unauthorized configuration changes.
• Usage Optimization: Retrieve userUsageReport statistics to identify inactive accounts or those consuming excessive storage space, helping to manage license costs and storage quotas.
• Compliance Reporting: Generate historical reports on document sharing settings and file-level access events to satisfy regulatory and organizational auditing requirements.
• Operational Troubleshooting: Investigate specific application activities (e.g., Drive or Classroom) when users report service issues or permission errors.

Example Prompts

1. "Check the last 10 login events for the user [email protected] using the admin activities log."
2. "Generate a report on total storage consumption for all users in the organization for the past month."
3. "List all administrator activity in the Google Drive app from the last 24 hours to track potential file sharing abuse."

Tips & Limitations

• Discovering Parameters: Always run gws schema admin-reports.<resource>.<method> before execution to understand required flags and parameter formatting, as the Google API expects specific ISO-8601 date formats and resource keys.
• Scope Permissions: Ensure your service account or authenticated user has the necessary 'Admin Reports' read-only scopes in the Google Cloud Console.
• Rate Limiting: Note that the Google Workspace Reports API has strict quota limits. For massive data extraction tasks, use the watch method to receive notifications rather than repeated polling to avoid throttling.