Triage Security Alerts

Execute Google Workspace workflow: $ARGUMENTS

Triage Google Workspace Security Alerts

PREREQUISITE: Load the following skills to execute this recipe: gws-alertcenter

List and review Google Workspace security alerts from Alert Center.

Steps

1. List active alerts: gws alertcenter alerts list --format table
2. Get alert details: gws alertcenter alerts get --params '{"alertId": "ALERT_ID"}'
3. Acknowledge an alert: gws alertcenter alerts undelete --params '{"alertId": "ALERT_ID"}'

Task

Execute this workflow with the following parameters: $ARGUMENTS

1. Prerequisites Check

   • Verify gws CLI is installed: gws --version
   • Confirm authentication: gws auth status
   • Load required GWS skills (check PREREQUISITE section above)

2. Parameter Preparation

   • Parse task parameters from $ARGUMENTS
   • Validate required inputs
   • Prepare JSON payloads and flags

3. Execute Workflow Steps

   • Follow the steps outlined above
   • Replace placeholder IDs with actual values
   • Handle errors and retries
   • Log progress and results

4. Verify Results

   • Confirm each step completed successfully
   • Verify changes in Google Workspace
   • Report final status and any issues

Tips

• Use --dry-run flag when available to preview changes
• Always inspect API schemas before calling: gws schema <service>.<resource>.<method>
• Check command help for all flags: gws <service> <resource> <method> --help

---

License: Apache License 2.0 Source: Google Workspace CLI Original Skill: recipe-triage-security-alerts