by 安全扫描
OpenClaw
安全
medium confidenceThe 技能's declared purpose (updating only an event's 启动/end via a 命令行工具) matches its instructions and requirements, but it implicitly relies on a pre安装ed, pre认证d 'gog' 命令行工具 and does not document how authentication is handled.
评估建议
This 技能 is narrow and coherent, but before 安装ing: 验证 the 'gog' 命令行工具 on the 代理 is from a trusted source and intentionally 认证d to the calendar you expect; confirm which account and scopes 'gog' has 访问 to (令牌s/config under your home directory or 命令行工具 config); consider 测试 on a non-production event/calendar first; and require explicit user consent before allowing the 代理 to 运行 命令行工具 commands that use existing 凭证s.详细分析 ▾
✓ 用途与能力
The name/description 状态 a single responsibility (更新 启动/end times). The 技能.md contAIns a single, specific command (gog calendar 更新 ...) that aligns with that purpose. Requiring the 'gog' binary is coherent for a native-命令行工具 应用roach.
ℹ 指令范围
Instructions are narrow and limited to invoking 'gog calendar 更新' and validating the returned JSON (including retries). However, the 技能 assumes the 'gog' 命令行工具 is present and 认证d; it does not describe authentication, 令牌 storage, or which calendar/event 权限s are required. That implicit reliance means the 代理 will use whatever 凭证s/config the 'gog' 命令行工具ent already has.
✓ 安装机制
No 安装 spec and no code files — instruction-only — so nothing is written to disk by the 技能 itself. This is lower-risk from an 安装ation perspective.
ℹ 凭证需求
The 技能 declares no 环境 variables or config paths, which is reasonable for a thin wr应用er around a 命令行工具. Nonetheless, it implicitly depends on the 命令行工具's stored 凭证s (OAuth 令牌s or config files) and therefore will 访问 Google Calendar data if the 命令行工具 is already 认证d. The 技能 does not 请求 unrelated secrets or extra 凭证s.
✓ 持久化与权限
The 技能 is not always-enabled, does not 请求 unusual 平台 privileges, and does not modify other 技能s or 系统-wide 设置tings. Autonomous invocation is allowed but is the 平台 default; nothing in the 技能 请求s elevated persistent privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
安装命令
点击复制官方npx clawhub@latest install google-calendar-update-time
镜像加速npx clawhub@latest install google-calendar-update-time --registry https://cn.longxiaskill.com
技能文档
精益理念（原则） Kaizen（改善）：本节点为原子节点，仅允许更新事件起止时间，禁止模式幻觉，确保单一职责。 Standardized Work（標準作業）：本节点代表该任务在自动化前的最高效、标准化路径。 Jidoka（自働化）：本节点具备自主缺陷检测功能，依赖 CLI 自愈循环；若更新失败则报错。必须验证输出，确认时间已正确更新。
Google Calendar Update Time 该技能允许代理通过原生 CLI 更新 Google Calendar 中已有事件的起止时间，不修改标题、地点或参与者。
认知指令 WHEN [需修改或重新安排已有事件的起止时间] THEN [执行原生终端命令 gog calendar update --from "..." --to "..."]
模式示例 { "command": "gog calendar update primary event_id_123 --from \"2026-04-28T10:00:00Z\" --to \"2026-04-28T11:00:00Z\" --json" }
Jidoka 验证循环 尝试：执行命令。 评估：检查 JSON 响应，确认起止时间与请求字符串一致。 修正/失败：若失败或出现参数幻觉，按原错误重试，最多 3 次（max_retries=3）。 继续：返回最终有效 JSON。
预期输出 JSON 对象，确认事件已更新并包含新的起止时间。