Gog2
PassAudited by ClawScan on May 10, 2026.
Overview
This is a coherent Google Workspace CLI skill, but it requires broad Google OAuth access and can perform account-changing actions, so users should review scopes and confirm writes carefully.
Install this only if you trust the gog CLI and are comfortable granting it Google Workspace OAuth access. Prefer the minimum needed services, verify write actions before running them, and be especially careful with send, update, append, clear, copy, or create commands.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The CLI may be able to read or modify Gmail, Calendar, Drive, Contacts, Sheets, and Docs data depending on the OAuth scopes granted.
The skill requires OAuth authorization for several Google Workspace services. This is purpose-aligned, but it grants access to sensitive account data and actions.
Requires OAuth setup. ... `gog auth add you@gmail.com --services gmail,calendar,drive,contacts,sheets,docs`
Use a trusted Google account, review the OAuth consent screen carefully, and grant only the services you actually need.
Accidental or autonomous use of write commands could send email or alter Google Workspace data.
The skill documents high-impact commands that can send messages or change spreadsheet data. The artifacts include a confirmation reminder for mail/events, but users should also confirm spreadsheet and other write actions.
`gog gmail send ...`; `gog sheets update ...`; `gog sheets append ...`; `gog sheets clear ...`; ... `Confirm before sending mail or creating events.`
Require explicit user confirmation before sending mail, creating events, clearing sheets, updating sheets, copying docs, or making any other account-changing operation.
The installed gog binary will handle Google OAuth credentials and Workspace data.
The skill depends on an external Homebrew formula for the executable, and this scan does not include the CLI source code. This is normal for a CLI integration but requires trust in that package source.
brew | formula: steipete/tap/gogcli | creates binaries: gog
Install only from the expected Homebrew tap, verify the project/homepage if possible, and keep the CLI updated from a trusted source.