ClawHub

Aj Gog

v1.0.0

Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs.

⭐ 0· 120·0 current·0 all-time
by@aceundefeated·fork of @steipete/gog (1.0.0)
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the runtime instructions. The skill expects the gog CLI and describes Gmail/Calendar/Drive/Contacts/Sheets/Docs commands; requiring the gog binary is proportional to the stated purpose.
✓
Instruction Scope
SKILL.md only tells the agent to run gog commands and how to set up OAuth; it does not instruct reading unrelated system files or sending data to unexpected endpoints. It explicitly notes to confirm before sending mail or creating events.
ℹ
Install Mechanism
Install uses a Homebrew formula (steipete/tap/gogcli) which is a typical installer path for CLI tools. This is moderate-low risk overall, but the tap is a third-party tap (not the official Homebrew/core), so users may want to inspect the formula before installing.
ℹ
Credentials
The skill declares no required env vars in metadata, but SKILL.md references OAuth client_secret.json and suggests setting GOG_ACCOUNT. Requesting OAuth credentials and an account is expected for a Google Workspace CLI, but the metadata does not declare these config needs explicitly — users should be aware that sensitive credentials and tokens will be used/stored by the gog tool.
✓
Persistence & Privilege
No elevated persistence requested (always:false). The skill does not request changes to other skills or global agent settings. Autonomous invocation is allowed by default, which is normal.
Assessment
This skill appears to do what it says: it is just wrappers around the gog CLI. Before installing: (1) review the Homebrew formula in steipete/tap to ensure you trust the maintainer; (2) be prepared to supply an OAuth client_secret.json from the Google Cloud Console and an account — these are sensitive and will allow the CLI to access your Gmail/Drive/etc.; (3) inspect where gog stores tokens on disk and revoke tokens if you later distrust the tool; and (4) when scripting, prefer the --no-input and --json options and confirm before using commands that send mail or modify data.

Like a lobster shell, security has layers — review code before you run it.

latestvk97898fw73682zkp14vygnqtts83mpn9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎮 Clawdis
Binsgog

Install

Install gog (brew)
Bins: gog
brew install steipete/tap/gogcli

Comments