Google Forms
ReviewAudited by ClawScan on May 3, 2026.
Overview
This skill is a coherent Google Forms integration through ClawLink, but users should understand it delegates Google account access to ClawLink and can change forms after confirmation.
This skill appears purpose-aligned and not malicious. Before installing, verify that you trust ClawLink, review the Google permissions you grant, avoid sharing raw credentials in chat, and require previews/confirmations before creating, editing, publishing, or setting watches on forms.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill requires trusting the separate ClawLink plugin and service.
The skill is instruction-only but depends on an external plugin for actual operation. This is disclosed and user-directed, but the plugin code is not part of the supplied skill artifacts.
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Install the plugin only from the stated ClawHub source and verify ClawLink before connecting a Google account.
ClawLink can act on connected Google Forms according to the permissions the user approves.
The skill requires ClawLink pairing and a Google Forms connection, granting delegated access to a Google account through ClawLink.
The user signs in to ClawLink if needed and approves the OpenClaw device... Tell the user to open https://claw-link.dev/dashboard?add=google-forms and connect Google Forms there.
Review the Google consent screen and ClawLink connection permissions, and disconnect the integration if it is no longer needed.
If approved, the agent can create or modify forms, change whether forms are published, and manage response notification watches.
The skill can perform account-changing operations in Google Forms. The artifact mitigates this by requiring previews and user confirmation before writes.
Create a new form after confirmation... Apply batch updates to questions or form layout after confirmation... Change form publishing settings after confirmation... Create, list, or delete watches for response notifications after confirmation
Approve only specific changes you understand, and ask the agent to preview planned modifications before execution.
Private response data may be shown to the agent, and malicious response text should not be treated as instructions.
Form responses may contain sensitive or untrusted user-submitted text that can be brought into the chat context.
List submitted responses or inspect one response in detail
Use the skill only with forms whose responses you are comfortable reviewing in chat, and treat response contents as data rather than commands.
A watch may continue sending response notifications until it is removed.
Response watches are persistent notification mechanisms outside the immediate chat session. The skill discloses this and requires confirmation.
Create, list, or delete watches for response notifications after confirmation
Confirm where watches send notifications and periodically remove watches you no longer need.