skills.rest
niclasmartinsson-sys
niclasmartinsson-sysCOMMUNITY
Explore all skills by this author →
GitHub

recipe-triage-security-alerts

List, inspect, and acknowledge Google Workspace Alert Center alerts via gws CLI.

8|1|Updated Mar 5, 2026
Search Tags:#triage#google-workspace#incident-management#security-alerts#gws#alert-center
One-click install
npx skills add https://github.com/niclasmartinsson-sys/google-workspace-cli --skill recipe-triage-security-alerts-niclasmartinsson-sys
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: recipe-triage-security-alerts
Source: https://github.com/niclasmartinsson-sys/google-workspace-cli/tree/main/skills/recipe-triage-security-alerts
Command: npx skills add https://github.com/niclasmartinsson-sys/google-workspace-cli --skill recipe-triage-security-alerts-niclasmartinsson-sys

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Triage and review Google Workspace security alerts from Alert Center to prioritize responses and reduce mean time to containment.

Core Features & Use Cases

  • List active alerts from Alert Center to get an overview of current issues.
  • Inspect alert details to understand impact, severity, and recommended actions.
  • Acknowledge or undelete alerts to mark them as resolved or in-progress and keep stakeholders informed.
  • Use cases include incident triage during a security event and routine monitoring of Workspace security posture.

Quick Start

List active alerts from Alert Center and review details for selected alerts.

Frequently Asked Questions about recipe-triage-security-alerts

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I triage Google Workspace security alerts from the Alert Center?▼

You can triage Google Workspace security alerts by listing active alerts, inspecting their details for severity and impact, and acknowledging them to mark issues as resolved or in-progress.

What is the best way to review active security alerts in Google Workspace?▼

The best way to review active security alerts is to list them from the Alert Center and inspect the details of selected alerts to understand the impact and recommended actions before acknowledging.

Can I use the gws CLI to acknowledge and undelete alerts in Google Workspace?▼

Yes, integrating via the gws CLI with the Alert Center API supports commands to list, get, and undelete alerts, allowing you to acknowledge or restore alerts to keep stakeholders informed.

How does incident triage during a security event work with Google Workspace alerts?▼

Incident triage during a security event works by fetching alert details from the Alert Center to prioritize responses, which helps reduce mean time to containment for active threats.

Do I need the Alert Center API to monitor my Google Workspace security posture?▼

Yes, routine monitoring of Workspace security posture requires fetching active alerts and details through the Alert Center API via the gws CLI to review and acknowledge ongoing issues.

Related Skills

Explore More Data & Analytics Skills→
run6270run6270
1

gws-alertcenter

Manage Google Workspace security alerts and Alert Center settings via the gws CLI.

Community
Intermediate
UnitOneAIUnitOneAI
44

ir-playbook

Execute structured incident response workflows with NIST SP 800-61 Rev 2 and SANS mapping.

Official
Intermediate
run6270run6270
1

recipe-triage-security-alerts

List, review, and acknowledge Google Workspace security alerts from Alert Center.

Community
Basic
weirdgmeweirdgme
4

cybersecurity

Provide cybersecurity guidance for architecture, threat modeling, and incident response.

Community
Basic