Google Slides
AdvisoryAudited by Static analysis on May 6, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Connecting the wrong Google account or approving broad scopes could allow the integration to access or modify presentations available to that account.
The skill requires delegated Google/ClawLink authorization to work. This is expected for a Google Slides connector, but it grants access within the approved account scopes.
ClawLink's hosted page runs the hosted OAuth flow — the user signs in with Google and approves the requested access.
Review the OAuth consent screen and requested scopes, use the intended Google account, and revoke the connection from ClawLink or Google when no longer needed.
Approved tool calls may change presentation content or deck state in the connected Google account.
The skill can invoke dynamic ClawLink tools, including write operations that update Google Slides. The artifact includes appropriate safeguards such as preview and user confirmation.
For writes or anything marked as requiring confirmation, call `clawlink_preview_tool` first, then confirm with the user. Execute with `clawlink_call_tool`.
Preview changes, confirm the target presentation and requested edits, and avoid bulk or destructive actions unless the user explicitly approves them.
The installed plugin will mediate the connection to ClawLink tools and credentials, so its integrity matters.
The skill depends on an external ClawLink plugin that is not included in this skill's artifacts. The install is user-directed and named, but it introduces trust in that plugin and its registry source.
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Install the plugin only from the stated ClawHub source, verify it with ClawLink's published verification/source links if desired, and keep it updated.
Credential and integration traffic depends on ClawLink as a trusted intermediary for Google Slides access.
The skill routes credentials and Google Slides tool access through the ClawLink gateway. The endpoint and storage behavior are disclosed, and the instruction explicitly avoids pasting raw credentials into chat.
The resulting device credential is stored locally in OpenClaw's plugin config and is only sent to `claw-link.dev`.
Use ClawLink only if you trust that provider, avoid sharing raw credentials in chat, and disconnect the integration if it is no longer needed.