Google Docs
AdvisoryAudited by Static analysis on May 3, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
You may be adding a separate plugin that can provide runtime tools and handle Google Docs actions.
The skill depends on a separate plugin that is not part of the provided artifacts. The install is disclosed and user-directed, but users should verify the plugin source before installing.
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Install the ClawLink plugin only from the expected ClawHub source, and review ClawLink verification or source information if you need stronger assurance.
Once connected, ClawLink-backed tools may act on your Google Docs according to the permissions you grant.
The skill uses a persistent ClawLink device credential and a connected Google Docs account. This is expected for the service, but it creates delegated access to the user's documents.
The resulting device credential is stored locally in OpenClaw's plugin config and is only sent to `claw-link.dev`.
Use the intended Google account, review the Google consent screen and scopes, and revoke the ClawLink connection if you stop using the skill.
If you approve the wrong action, a document could be created or edited in your Google account.
The skill can create and modify Google Docs, which is high-impact user-data mutation. The instruction to confirm first makes it purpose-aligned and controlled rather than suspicious.
Ask for confirmation before creating documents or modifying existing content or structure.
Carefully review previews, target document names or IDs, and requested edits before confirming any write operation.
Your Google Docs searches, document reads, exports, or edits may be processed through ClawLink-provided tools.
The skill relies on a third-party integration hub to provide tool schemas and perform Google Docs operations at runtime. This is disclosed, but it means document queries and operations depend on ClawLink's external boundary.
ClawLink provides tools dynamically based on what the user has connected. You do not need to know tool names or schemas in advance.
Review ClawLink's privacy and security information, and avoid connecting accounts or documents you do not want handled through that service.