/recipe-triage-security-alerts

allowed-tools: Bash, Read, Write, Edit
argument-hint: [task-parameters]
description: List and review Google Workspace security alerts from Alert Center.

Triage Security Alerts

Execute Google Workspace workflow: $ARGUMENTS

Triage Google Workspace Security Alerts

> **PREREQUISITE:** Load the following skills to execute this recipe: `gws-alertcenter`

List and review Google Workspace security alerts from Alert Center.

Steps

1. List active alerts: `gws alertcenter alerts list --format table` 2. Get alert details: `gws alertcenter alerts get --params '{"alertId": "ALERT_ID"}'` 3. Acknowledge an alert: `gws alertcenter alerts undelete --params '{"alertId": "ALERT_ID"}'`

Task

Execute this workflow with the following parameters: $ARGUMENTS

1. **Prerequisites Check**

• Verify `gws` CLI is installed: `gws --version`
• Confirm authentication: `gws auth status`
• Load required GWS skills (check PREREQUISITE section above)

2. **Parameter Preparation**

• Parse task parameters from $ARGUMENTS
• Validate required inputs
• Prepare JSON payloads and flags

3. **Execute Workflow Steps**

• Follow the steps outlined above
• Replace placeholder IDs with actual values
• Handle errors and retries
• Log progress and results

4. **Verify Results**

• Confirm each step completed successfully
• Verify changes in Google Workspace
• Report final status and any issues

Tips

• Use `--dry-run` flag when available to preview changes
• Always inspect API schemas before calling: `gws schema <service>.<resource>.<method>`
• Check command help for all flags: `gws <service> <resource> <method> --help`

---

**License**: Apache License 2.0 **Source**: [Google Workspace CLI](https://github.com/googleworkspace/cli) **Original Skill**: `recipe-triage-security-alerts`