🎮 XferOps gog — 技能工具
v0.1.1[自动翻译] Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs.
0· 497·0 当前·0 累计
by 安全扫描
OpenClaw
安全
medium confidenceThis skill is internally coherent for a Google Workspace CLI: it expects the gog binary (installable via Homebrew) and its runtime instructions describe standard OAuth setup and usage, but there are a few small declaration gaps and a third‑party Homebrew tap you should verify before installing.
评估建议
This skill appears to do what it says: it wraps the gog CLI to access Google Workspace APIs. Before installing: 1) Verify the Homebrew tap/formula (steipete/tap/gogcli) and the binary’s upstream (check the project's homepage or source repo) to avoid installing a trojanized binary. 2) Keep OAuth client_secret.json and any generated tokens secure; prefer using the file keyring option instead of embedding GOG_KEYRING_PASSWORD in global profiles or systemd files. 3) Limit OAuth scopes to least privi...详细分析 ▾
✓ 用途与能力
The skill name/description (Google Workspace CLI) matches what the instructions require and show: the gog CLI, OAuth client credentials, and per-account auth. Requiring the gog binary and offering common Gmail/Calendar/Drive/Sheets/Docs commands is expected and proportional.
ℹ 指令范围
SKILL.md is concrete and limited to running the gog CLI against Google APIs. It references creating/using client_secret.json, running gog auth commands, and optionally setting GOG_ACCOUNT and GOG_KEYRING_PASSWORD for headless environments. It does not instruct the agent to read unrelated system files or exfiltrate data to third parties. However, it does reference environment variables and files (client_secret.json) that are not declared in the skill metadata.
ℹ 安装机制
Install uses a Homebrew formula (steipete/tap/gogcli) which is a normal mechanism. Because the formula is from a third‑party tap (steipete/tap) rather than the official Homebrew core, you should verify the tap/formula source before running brew install to ensure the binary is trustworthy.
ℹ 凭证需求
The skill metadata lists no required env vars, but the instructions explicitly mention GOG_KEYRING_PASSWORD and GOG_ACCOUNT (optional conveniences) and require a client_secret.json file for OAuth. These are reasonable for a headless Google CLI, but the metadata should have declared them. Be cautious about storing GOG_KEYRING_PASSWORD in shell profiles or systemd unit files in plaintext.
✓ 持久化与权限
The skill does not request always:true and does not modify other skills or system-wide settings in its instructions. It runs as a regular user CLI tool and requires explicit OAuth setup, so it does not demand elevated persistence or special platform privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.12026/2/24
Version 0.1.1 of xferops-gog - No file changes detected in this release. - No updates to commands, features, or documentation.
● 无害
安装命令
点击复制官方npx clawhub@latest install xferops-gog
镜像加速npx clawhub@latest install xferops-gog --registry https://cn.longxiaskill.com 镜像可用
本土化适配说明
XferOps gog — 技能工具 安装说明： 安装命令：npx clawhub@latest install xferops-gog
技能文档
Use gog for Gmail/Calendar/Drive/Contacts/Sheets/Docs. Requires OAuth setup.
Setup (once)
gog auth credentials /path/to/client_secret.jsongog auth add you@gmail.com --services gmail,calendar,drive,contacts,docs,sheetsgog auth list
Common commands
- Gmail search:
gog gmail search 'newer_than:7d' --max 10 - Gmail messages search (per email, ignores threading):
gog gmail messages search "in:inbox from:ryanair.com" --max 20 --account you@example.com - Gmail read email body:
gog gmail get --account you@example.com
get to fetch full body
- Use --format metadata for just headers, --format raw for raw RFC822
- Gmail attachments:
gog gmail attachment --out /path/to/save - Gmail send (plain):
gog gmail send --to a@b.com --subject "Hi" --body "Hello" - Gmail send (multi-line):
gog gmail send --to a@b.com --subject "Hi" --body-file ./message.txt - Gmail send (stdin):
gog gmail send --to a@b.com --subject "Hi" --body-file - - Gmail send (HTML):
gog gmail send --to a@b.com --subject "Hi" --body-html "Hello
" - Gmail draft:
gog gmail drafts create --to a@b.com --subject "Hi" --body-file ./message.txt - Gmail send draft:
gog gmail drafts send - Gmail reply:
gog gmail send --to a@b.com --subject "Re: Hi" --body "Reply" --reply-to-message-id - Calendar list events:
gog calendar events --from --to - Calendar create event:
gog calendar create --summary "Title" --from --to - Calendar create with color:
gog calendar create --summary "Title" --from --to --event-color 7 - Calendar update event:
gog calendar update --summary "New Title" --event-color 4 - Calendar show colors:
gog calendar colors - Drive search:
gog drive search "query" --max 10 - Contacts:
gog contacts list --max 20 - Sheets get:
gog sheets get "Tab!A1:D10" --json - Sheets update:
gog sheets update "Tab!A1:B2" --values-json '[["A","B"],["1","2"]]' --input USER_ENTERED - Sheets append:
gog sheets append "Tab!A:C" --values-json '[["x","y","z"]]' --insert INSERT_ROWS - Sheets clear:
gog sheets clear "Tab!A2:Z" - Sheets metadata:
gog sheets metadata --json - Docs export:
gog docs export --format txt --out /tmp/doc.txt - Docs cat:
gog docs cat
Calendar Colors
- Use
gog calendar colorsto see all available event colors (IDs 1-11) - Add colors to events with
--event-colorflag - Event color IDs (from
gog calendar colorsoutput):
Email Formatting
- Prefer plain text. Use
--body-filefor multi-paragraph messages (or--body-file -for stdin). - Same
--body-filepattern works for drafts and replies. --bodydoes not unescape\n. If you need inline newlines, use a heredoc or$'Line 1\n\nLine 2'.- Use
--body-htmlonly when you need rich formatting. - HTML tags:
for paragraphs,for bold,for italic,for links,gog gmail send --to recipient@example.com \ --subject "Meeting Follow-up" \ --body-file - <<'EOF' Hi Name,Thanks for meeting today. Next steps: - Item one - Item two
Best regards, Your Name EOFgog gmail send --to recipient@example.com \ --subject "Meeting Follow-up" \ --body-html "Hi Name,
Thanks for meeting today. Here are the next steps:
- Item one
- Item two
Best regards,
"
Your NameHeadless/EC2 setup: On headless machines (no TTY), gog needs
GOG_KEYRING_PASSWORDset:- Add to shell profile:
export GOG_KEYRING_PASSWORD=your-password - Add to systemd service:
Environment=GOG_KEYRING_PASSWORD=your-password - Or use file keyring:
gog auth keyring file
- Set
GOG_ACCOUNT=you@gmail.comto avoid repeating--account. - For scripting, prefer
--jsonplus--no-input. - Sheets values can be passed via
--values-json(recommended) or as inline rows. - Docs supports export/cat/copy. In-place edits require a Docs API client (not in gog).
- Confirm before sending mail or creating events.
gog gmail searchreturns one row per thread; usegog gmail messages searchwhen you need every individual email returned separately.