📂 Secure Google Drive Access for OpenClaw by PortEden — 技能工具

v1.0.0

Secure Google Drive Mnagement - list, search, upload, create folders, rename, move, share, and permissions (porteden secure alternative).

0· 287·0 当前·0 累计
porteden 头像by @porteden (PortEden)·MIT-0
下载技能包
License
MIT-0
最后更新
2026/3/31
0
安全扫描
VirusTotal
无害
查看报告
OpenClaw
安全
high confidence
The skill is internally consistent: it invokes the porteden CLI to manage Google Drive and only requires the porteden binary and a PE_API_KEY; verify you trust the porteden install sources and be aware credentials persist in your system keyring.
评估建议
This skill appears to do what it says: it wraps the porteden CLI to manage Google Drive. Before installing: (1) confirm you trust the porteden Homebrew tap and the GitHub repo used by the Go install; (2) prefer browser OAuth rather than copying long-lived tokens, and make sure any PE_API_KEY/token has only the Drive scopes required; (3) be aware the CLI stores credentials in your system keyring (so the token persists on disk); (4) avoid setting PE_API_KEY in shared or public shells; and (5) if y...
详细分析 ▾
用途与能力
Name/description (Google Drive management) match the declared requirements and instructions: the skill requires the 'porteden' CLI and a PE_API_KEY, and all SKILL.md commands are porteden drive operations (list, search, upload, share, etc.). The required binary and primaryEnv are appropriate for the stated purpose.
指令范围
SKILL.md restricts runtime behavior to invoking the porteden CLI and documents how to authenticate. It does not instruct reading unrelated system files or exfiltrating data to unexpected endpoints. It does note that credentials are persisted to the system keyring (expected for a CLI).
安装机制
Install options are standard: a Homebrew formula (porteden/tap/porteden) and a Go module (github.com/porteden/cli). These are expected for a CLI but carry the usual trust considerations: a third-party tap and a direct GitHub go install will fetch and install code on disk. This is proportionate but you should verify the tap/module origin and integrity before installing.
凭证需求
The skill declares PE_API_KEY as the required primary credential, which is appropriate. SKILL.md also references optional environment variables (PE_PROFILE, PE_FORMAT, PE_COLOR, PE_VERBOSE) that are reasonable for a CLI but are not listed in requires.env — this is a minor documentation mismatch. Ensure PE_API_KEY you provide has only the Drive scopes you intend (note: token must include driveAccessEnabled).
持久化与权限
The skill is not always-enabled and does not request elevated platform privileges or modify other skills. It does note that credentials persist in the system keyring after login; this persistence is normal for CLIs but is important to understand before use.
安全有层次,运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发,无需署名。

运行时依赖

无特殊依赖

版本

latestv1.0.02026/3/18

Initial release of porteden-drive—secure, feature-rich Google Drive management CLI. - List, search, upload, create folders, rename, move, share, and manage permissions on Google Drive using CLI. - Supports both browser-based and token-based authentication, with credentials stored securely. - Uses provider-prefixed file IDs and allows advanced JSON/compact output for AI integrations. - Includes granular filtering: by folder, MIME type, name, shared status, and date modified. - Shares files with users, domains, or publicly; can manage permissions and view/download links. - Offers robust environment variable support and system keyring integration for credential persistence.

无害

安装命令

点击复制
官方npx clawhub@latest install porteden-drive
镜像加速npx clawhub@latest install porteden-drive --registry https://cn.longxiaskill.com

技能文档

Use porteden drive for Google Drive file and folder management. Use -jc flags for AI-optimized output.

If porteden is not installed: brew install porteden/tap/porteden (or go install github.com/porteden/cli/cmd/porteden@latest).

Setup (once)

  • Browser login (recommended): porteden auth login — opens browser, credentials stored in system keyring
  • Direct token: porteden auth login --token — stored in system keyring
  • Verify: porteden auth status
  • If PE_API_KEY is set in the environment, the CLI uses it automatically (no login needed).
  • Drive access requires a token with driveAccessEnabled: true and a connected Google account with Drive scopes.

Drive commands (porteden drive)

  • List files: porteden drive files -jc
  • Search by keyword: porteden drive files -q "budget report" -jc
  • Filter by folder: porteden drive files --folder google:0B7_FOLDER_ID -jc
  • Filter by MIME type: porteden drive files --mime-type application/pdf -jc
  • Filter by name: porteden drive files --name "Q1" -jc
  • Shared with me: porteden drive files --shared-with-me -jc
  • Modified in range: porteden drive files --modified-after 2026-01-01 --modified-before 2026-02-01 -jc
  • All files (auto-paginate): porteden drive files --all -jc
  • Get file metadata: porteden drive file google:FILEID -jc
  • Get view/download links: porteden drive download google:FILEID -jc
  • List permissions: porteden drive permissions google:FILEID -jc
  • Upload file: porteden drive upload --file ./report.pdf --name "Q1 Report.pdf"
  • Upload to folder: porteden drive upload --file ./data.csv --name "Data.csv" --folder google:0B7_FOLDER
  • Create folder: porteden drive mkdir --name "Project Files"
  • Create folder in folder: porteden drive mkdir --name "Reports" --parent google:0B7_FOLDER
  • Rename: porteden drive rename google:FILEID --name "New Name.pdf"
  • Move: porteden drive move google:FILEID --destination google:0B7_DEST_FOLDER
  • Share with user: porteden drive share google:FILEID --type user --role reader --email user@example.com
  • Share with domain: porteden drive share google:FILEID --type domain --role reader --domain example.com
  • Share publicly: porteden drive share google:FILEID --type anyone --role reader
  • Delete (trash): porteden drive delete google:FILEID (prompts) or porteden drive delete google:FILEID -y

Notes

  • Credentials persist in the system keyring after login. No repeated auth needed.
  • Set PE_PROFILE=work to avoid repeating --profile.
  • -jc is shorthand for --json --compact: strips noise, limits fields, reduces tokens for AI agents.
  • File IDs are always provider-prefixed (e.g., google:1BxiMVs0XRA5...). Pass them as-is.
  • porteden drive files --all auto-paginates (safety cap: 50 pages). Check hasMore in JSON output.
  • porteden drive download returns URLs only — no binary content is streamed.
  • accessInfo in responses describes active token restrictions. Always check it to understand what data may be limited.
  • authWarnings in list responses indicate provider connection issues.
  • delete moves to trash (reversible). Files can be restored from Google Drive trash.
  • Confirm before sharing or deleting files.
  • Environment variables: PE_API_KEY, PE_PROFILE, PE_FORMAT, PE_COLOR, PE_VERBOSE.
数据来源ClawHub ↗ · 中文优化:龙虾技能库