by 安全扫描
OpenClaw
安全
high confidenceThe skill is internally consistent: it documents a CLI for Google Workspace, requires the gog binary and OAuth credentials (as expected), and its instructions align with that purpose.
评估建议
This skill appears to do what it says: it expects the 'gog' binary and Google OAuth credentials to operate on Gmail, Calendar, Drive, Contacts, Sheets, and Docs. Before installing or using it, verify the gog binary's provenance (check the upstream project or GitHub repo linked from https://gogcli.sh), and be cautious when adding OAuth client credentials — treat client_secret.json as sensitive and restrict scopes to the minimum needed. If you install via the suggested brew tap (steipete/tap/gogcl...详细分析 ▾
✓ 用途与能力
Name/description match the runtime instructions: all commands are standard gog CLI usage for Gmail/Calendar/Drive/Contacts/Sheets/Docs. The only required binary is 'gog', which is appropriate for a CLI integration.
ℹ 指令范围
SKILL.md asks the user to run gog auth commands and to supply a client_secret.json (OAuth client credentials) and optionally set GOG_ACCOUNT. These are expected for a Google Workspace CLI. The SKILL.md does reference an env var (GOG_ACCOUNT) that is not listed in the skill's declared requires.env, but this is harmless informational guidance rather than unexpected data collection.
ℹ 安装机制
The registry contains no formal install spec (instruction-only), which is low-risk. SKILL.md metadata suggests a brew formula (steipete/tap/gogcli). A third-party brew tap is a plausible install path but merits verification of the tap/source before installing.
✓ 凭证需求
The skill declares no required environment variables or credentials. It does require OAuth client credentials (client_secret.json) for Google APIs — this is proportionate and expected for access to Gmail/Drive/etc. No unrelated secrets or unrelated services are requested.
✓ 持久化与权限
Skill is not always-enabled and does not request elevated or persistent platform privileges. It does not instruct modifying other skills or system-wide agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/18
Add tags for better discovery
● 无害
安装命令 点击复制
官方npx clawhub@latest install jx76-gog
镜像加速npx clawhub@latest install jx76-gog --registry https://cn.clawhub-mirror.com
技能文档
Use gog for Gmail/Calendar/Drive/Contacts/Sheets/Docs. Requires OAuth setup.
Setup (once)
gog auth credentials /path/to/client_secret.jsongog auth add you@gmail.com --services gmail,calendar,drive,contacts,sheets,docsgog auth list
Common commands
- Gmail search:
gog gmail search 'newer_than:7d' --max 10 - Gmail send:
gog gmail send --to a@b.com --subject "Hi" --body "Hello" - Calendar:
gog calendar events--from --to - Drive search:
gog drive search "query" --max 10 - Contacts:
gog contacts list --max 20 - Sheets get:
gog sheets get"Tab!A1:D10" --json - Sheets update:
gog sheets update"Tab!A1:B2" --values-json '[["A","B"],["1","2"]]' --input USER_ENTERED - Sheets append:
gog sheets append"Tab!A:C" --values-json '[["x","y","z"]]' --insert INSERT_ROWS - Sheets clear:
gog sheets clear"Tab!A2:Z" - Sheets metadata:
gog sheets metadata--json - Docs export:
gog docs export--format txt --out /tmp/doc.txt - Docs cat:
gog docs cat
Notes
- Set
GOG_ACCOUNT=you@gmail.comto avoid repeating--account. - For scripting, prefer
--jsonplus--no-input. - Sheets values can be passed via
--values-json(recommended) or as inline rows. - Docs supports export/cat/copy. In-place edits require a Docs API client (not in gog).
- Confirm before sending mail or creating events.
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制