Gog Local
v1.0.0Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs.
⭐ 0· 184·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the runtime instructions and the single required binary 'gog'. The SKILL.md documents Gmail/Calendar/Drive/Contacts/Sheets/Docs commands and shows the expected OAuth setup (client_secret.json and account add). Requiring the gog binary and OAuth is proportionate to the stated purpose.
Instruction Scope
SKILL.md only instructs the agent to run the gog CLI and to perform OAuth credential setup; it does not ask the agent to read unrelated system files, environment variables (aside from an optional GOG_ACCOUNT), or post data to unexpected endpoints. Commands operate on Google Workspace APIs as described and include reasonable cautions (e.g., confirm before sending mail).
Install Mechanism
Install uses a Homebrew formula (steipete/tap/gogcli) which is a third‑party tap rather than the core brew repo. Using brew is normal for installing CLI tools, but users should verify the tap/formula origin and contents before installing a binary that will access sensitive Google data.
Credentials
The registry metadata lists no required env vars or credentials, but the SKILL.md explicitly requires OAuth client credentials (client_secret.json) and creating an account token via 'gog auth add'. This is expected for a Google Workspace CLI, but users should be aware the CLI will store OAuth tokens locally and will be able to access their Google data once authorized.
Persistence & Privilege
Skill is not always-enabled, does not request elevated platform privileges, and does not modify other skills or global agent config. Any persistence is from the gog CLI's own OAuth token storage, which is outside the skill bundle and under the user's control.
Assessment
This skill is instruction-only and coherent: it tells the agent to call a local 'gog' CLI that interacts with Google Workspace via OAuth. Before installing or using it: (1) verify the Homebrew tap/formula (steipete/tap/gogcli) and review the upstream project (https://gogcli.sh) or source code for the gog binary you will run; (2) be prepared to provide OAuth client_secret.json and to authorize the tool — doing so gives the binary access to your Gmail, Drive, Calendar, Contacts, Sheets, and Docs; (3) check where gog stores tokens on your system and revoke them if you stop trusting the tool; (4) when automating, use --no-input/--json as suggested and always confirm before sending mail or creating events. The skill itself contains no hidden code, but the runtime risk comes from the binary you install, so vet that binary before granting access.Like a lobster shell, security has layers — review code before you run it.
latestvk972wz1gb6058hxngd2sqn6q9d83hk70
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎮 Clawdis
Binsgog
Install
Install gog (brew)
Bins: gog
brew install steipete/tap/gogcli