Skip to main content
skill Claude Code CX Codex Cursor GitHub Copilot official · Google

gws-modelarmor-sanitize-response — Claude Code skill: response

This skill sends a model response to Google Model Armor for filtering with a template. Use it to check output before showing it to a user.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓
npx skills add googleworkspace/cli --skill gws-modelarmor-sanitize-response -a claude-code
Open on GitHub

What gws-modelarmor-sanitize-response does

The skill runs gws modelarmor +sanitize-response with a Model Armor template name. Pass response text with --text, or provide the full request body with --json; JSON takes precedence. You can also pipe a model command into the sanitizer.

You need the gws CLI and configured authentication. The shared instructions in ../gws-shared/SKILL.md cover auth and global flags; if that file is missing, the source recommends running gws generate-skills. A Model Armor template is required. Install this skill when you want to filter outgoing model responses; use +sanitize-prompt for inbound user content.

What it helps with

  • filter a model response before showing it to a user
  • send response text through a Model Armor template
  • submit a full JSON request body for filtering
  • pipe model output into the sanitizer

Example prompts for the agent

  • Check this response with `gws modelarmor +sanitize-response` using `projects/P/locations/L/templates/T`.
  • Run the sanitizer with the full request body passed through `--json`.
  • Pipe `model_cmd` into `gws modelarmor +sanitize-response --template ...`.

How to install gws-modelarmor-sanitize-response

1Skills CLI (Vercel)

npx skills add googleworkspace/cli --skill gws-modelarmor-sanitize-response -a claude-code

2Manually: put the files in place

~/.claude/skills/gws-modelarmor-sanitize-response/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/gws-modelarmor-sanitize-response/

From the same set95

The whole set →
gws-gmail official googleworkspace This skill hands your agent Gmail: send mail, read the inbox, reply in a thread. Useful when email work already runs through the gws CLI. Claude Code CX Codex Cursor +1 81,900installs gws-gmail-send official googleworkspace A skill that teaches your agent to send Gmail from the terminal: recipients, subject, body, attachments and drafts. Claude Code CX Codex Cursor +1 74,700installs gws-drive official googleworkspace This skill hands your agent Google Drive through the gws CLI: files, folders, shared drives, comments and access requests. Useful when docs move through code. Claude Code CX Codex Cursor +1 74,500installs gws-shared official googleworkspace This skill gives agents shared rules for gws CLI authentication, flags, and output formats. Use it when working with gws commands. Claude Code CX Codex Cursor +1 66,000installs gws-calendar official googleworkspace Manage Google Calendar events, access rules, and schedules through the gws CLI tool. Claude Code CX Codex Cursor +1 61,100installs gws-sheets official googleworkspace This skill lets an agent read and edit Google Sheets through the CLI. Use it when a coding workflow needs spreadsheet data or table updates. Claude Code CX Codex Cursor +1 58,800installs gws-docs official googleworkspace This skill lets an agent read and update Google Docs through gws. Use it when document changes should happen from an agent chat. Claude Code CX Codex Cursor +1 58,300installs gws-sheets-read official googleworkspace Reads cell values and sheets from Google Spreadsheets via CLI. Useful when an agent needs spreadsheet data without risk of altering it. Claude Code CX Codex Cursor +1 50,600installs

Similar

fix-security-vulnerabilities-with-strix usestrix This skill triages validated Strix findings, fixes their root causes, and runs Strix again to verify the result. Use it after a CLI or cloud scan. Claude Code CX Codex Cursor +1 15,500installs improve shadcn Surveys any codebase in read-only mode and writes self-contained implementation plans for other models to execute. Helps audit bugs, tech debt, and security without touching code. Claude Code CX Codex Cursor +1 37,500installs owasp-top-10-testing usestrix Runs Strix AI agents to execute exploits across OWASP Top 10:2025 categories. Useful for verifying attack paths with concrete proofs-of-concept before audits. Claude Code CX Codex Cursor +1 12,600installs git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. Claude Code 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. Claude Code CX Codex Cursor +1 56,300installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. Claude Code CX Codex Cursor +1 44,800installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. Claude Code CX Codex Cursor +1 52,200installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. Claude Code CX Codex Cursor +1 69,400installs

Questions about gws-modelarmor-sanitize-response

How do I install gws-modelarmor-sanitize-response in Claude Code?

Run npx skills add googleworkspace/cli --skill gws-modelarmor-sanitize-response -a claude-code.

What does gws-modelarmor-sanitize-response do?

It sends model output to Google Model Armor for filtering with the specified template. Provide text with --text or a full request body with --json.

What does the skill need to run?

It requires the gws CLI, configured authentication, and a full template resource name such as projects/PROJECT/locations/LOCATION/templates/TEMPLATE. Authentication instructions are in ../gws-shared/SKILL.md.

Source text

SKILL.md · Apache-2.0
---
name: gws-modelarmor-sanitize-response
description: "Google Model Armor: Sanitize a model response through a Model Armor template."
metadata:
  version: 0.22.5
  openclaw:
    category: "security"
    requires:
      bins:
        - gws
    cliHelp: "gws modelarmor +sanitize-response --help"
---

# modelarmor +sanitize-response

> **PREREQUISITE:** Read `../gws-shared/SKILL.md` for auth, global flags, and security rules. If missing, run `gws generate-skills` to create it.

Sanitize a model response through a Model Armor template

## Usage

```bash
gws modelarmor +sanitize-response --template <NAME>
```

## Flags

| Flag | Required | Default | Description |
|------|----------|---------|-------------|
| `--template` | ✓ | — | Full template resource name (projects/PROJECT/locations/LOCATION/templates/TEMPLATE) |
| `--text` | — | — | Text content to sanitize |
| `--json` | — | — | Full JSON request body (overrides --text) |

## Examples

```bash
gws modelarmor +sanitize-response --template projects/P/locations/L/templates/T --text 'model output'
model_cmd | gws modelarmor +sanitize-response --template ...
```

## Tips

- Use for outbound safety (model -> user).
- For inbound safety (user -> model), use +sanitize-prompt.

## See Also

- [gws-shared](../gws-shared/SKILL.md) — Global flags and auth
- [gws-modelarmor](../gws-modelarmor/SKILL.md) — All filter user-generated content for safety commands

© googleworkspace · Apache-2.0 · googleworkspace/cli

See also

Project sponsors

Companies that keep this analytics open
Gold sponsor

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor