📦 GWS — Google Workspace CLI
v2.1.9一键调用 Gmail、Drive、Calendar、Sheets、Docs 等全系列 Google Workspace API，完成发邮件、读写表格、管理日程、共享文件等自动化操作。
1· 340·0 当前·0 累计
by 下载技能包
最后更新
2026/4/11
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to be what it says: a wrapper around the official Google Workspace CLI. Before installing or using it, confirm you trust the @googleworkspace/cli package source (npm + GitHub repo), install it in a controlled environment, and prefer least-privilege OAuth scopes rather than the full set unless necessary. Be aware the setup instructs you to create an OAuth client and store client_secret.json in ~/.config/gws and may prompt you to accept an 'unverified app' flow for personal proj...详细分析 ▾
✓ 用途与能力
Name/description (Google Workspace CLI) align with required binaries (gws, jq, base64, python3), the required config (~/.config/gws/client_secret.json), and the OAuth env vars. Nothing requested appears unrelated to the stated purpose.
✓ 指令范围
SKILL.md stays on-topic: it documents gws commands, discovery, OAuth setup, troubleshooting, and file locations the CLI uses. It does not instruct the agent to read unrelated system files or exfiltrate data to non-Google endpoints.
ℹ 安装机制
The registry metadata lists no install spec, but SKILL.md contains an 'install' block and instructs an npm global install of @googleworkspace/cli. Installing a global npm package is expected for this CLI but is a moderate-risk action (arbitrary code executed at install time). The package and homepage point to the official GitHub repo, which reduces but does not eliminate install risk.
ℹ 凭证需求
Requested env vars and config path are appropriate. The setup guidance recommends many broad OAuth scopes (gmail, drive, calendar, docs, sheets, slides, forms, tasks, people, classroom, etc.), which is consistent with full Workspace control but represents high privilege — the user should apply least-privilege scopes and understand long-lived tokens if switching to 'In production'.
✓ 持久化与权限
No 'always: true' or other elevated persistence flags. The skill writes/reads its own config and token files under ~/.config/gws, which is appropriate for a CLI that performs OAuth; it does not request other skills' credentials or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv2.1.92026/3/24
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install gws-google-workspace
镜像加速npx clawhub@latest install gws-google-workspace --registry https://cn.longxiaskill.com