🎮 Gog2 — 技能工具
v1.0.0[自动翻译] Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs.
0· 395·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's runtime instructions and install step mostly match a Google Workspace CLI, but metadata mismatches and the third‑party brew tap raise questions you should resolve before installing and granting OAuth access.
评估建议
This skill appears to be a wrapper for a Google Workspace CLI and its instructions are consistent with that purpose, but take these precautions before installing or using it:
- Verify the brew tap (steipete/tap) and inspect the Homebrew formula on Github or the tap's repo to ensure it installs the expected gog binary and not additional/unexpected code.
- Confirm ownership: the registry entry lists 'gog2' and an ownerId that differs from the ownerId inside _meta.json; ask the publisher or check t...详细分析 ▾
ℹ 用途与能力
The declared purpose (Google Workspace CLI) matches the required binary 'gog' and the SKILL.md commands (Gmail, Drive, Sheets, Docs, etc.). However, the skill package is named 'Gog2'/slug 'gog2' in the registry while internal files (SKILL.md and _meta.json) use 'gog' and a different ownerId — that inconsistency is unexplained and could indicate repackaging or metadata errors.
ℹ 指令范围
SKILL.md stays on scope: it tells the agent to run the gog CLI and to perform OAuth setup (supply client_secret.json, add an account, then run search/send/export commands). It does not instruct reading arbitrary system files or exfiltrating data. It does require the user to supply OAuth credentials and to grant broad Google scopes if you enable gmail/calendar/drive/etc.
ℹ 安装机制
The install uses a Homebrew formula (steipete/tap/gogcli), which is a standard installer mechanism but from a third‑party tap. That is lower risk than an arbitrary URL download but still requires trusting the tap owner; review the formula/tap before installing.
ℹ 凭证需求
No environment variables are required, which aligns with a CLI that uses OAuth files. The SKILL.md asks you to provide a client_secret.json and to possibly set GOG_ACCOUNT — these are reasonable for the stated purpose. However, the skill requests broad Google API scopes (gmail/calendar/drive/contacts/sheets/docs) — granting those gives extensive access to user data and should be considered high‑sensitivity.
✓ 持久化与权限
The skill is not always-enabled and does not request special system config paths or credentials. Autonomous invocation is allowed (default) but not in itself a red flag here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/26
Initial release of gog: Google Workspace CLI - Provides command-line access to Gmail, Calendar, Drive, Contacts, Sheets, and Docs. - Supports OAuth credential setup and multi-service account authorization. - Includes commands for searching email, sending messages, managing calendars, searching Drive, listing contacts, and manipulating Sheets and Docs. - Offers scripting support with JSON outputs and no-input mode. - Configuration tips for repeated account use and command confirmations included.
● 无害
安装命令
点击复制官方npx clawhub@latest install gog2
镜像加速npx clawhub@latest install gog2 --registry https://cn.longxiaskill.com 镜像可用
本土化适配说明
Gog2 — 技能工具 安装说明： 安装命令：npx clawhub@latest install gog2
技能文档
Use gog for Gmail/Calendar/Drive/Contacts/Sheets/Docs. Requires OAuth setup.
Setup (once)
gog auth credentials /path/to/client_secret.jsongog auth add you@gmail.com --services gmail,calendar,drive,contacts,sheets,docsgog auth list
Common commands
- Gmail search:
gog gmail search 'newer_than:7d' --max 10 - Gmail send:
gog gmail send --to a@b.com --subject "Hi" --body "Hello" - Calendar:
gog calendar events --from --to - Drive search:
gog drive search "query" --max 10 - Contacts:
gog contacts list --max 20 - Sheets get:
gog sheets get "Tab!A1:D10" --json - Sheets update:
gog sheets update "Tab!A1:B2" --values-json '[["A","B"],["1","2"]]' --input USER_ENTERED - Sheets append:
gog sheets append "Tab!A:C" --values-json '[["x","y","z"]]' --insert INSERT_ROWS - Sheets clear:
gog sheets clear "Tab!A2:Z" - Sheets metadata:
gog sheets metadata --json - Docs export:
gog docs export --format txt --out /tmp/doc.txt - Docs cat:
gog docs cat
Notes
- Set
GOG_ACCOUNT=you@gmail.comto avoid repeating--account. - For scripting, prefer
--jsonplus--no-input. - Sheets values can be passed via
--values-json(recommended) or as inline rows. - Docs supports export/cat/copy. In-place edits require a Docs API client (not in gog).
- Confirm before sending mail or creating events.