Recipe Triage Security Alerts

If you're managing Google Workspace security, this recipe gives you a straightforward CLI workflow for handling Alert Center notifications. It pulls up active alerts in a table view, lets you dig into specific ones by ID, and marks them as acknowledged when you're done. Nothing fancy, just three commands that chain together the gws-alertcenter skill to keep you from having to click around the Alert Center UI. The acknowledge step uses an "undelete" command which feels like odd naming, but that's how the underlying API works. Useful if you're already living in the terminal and want security alert triage in your usual workflow instead of context switching to a web dashboard.

Install to Claude Code

npx -y skills add googleworkspace/cli --skill recipe-triage-security-alerts --agent claude-code