Andrew Google Sheets

Google Sheets API ���� ������� �기/�기, ��, ��맷� �리. OAuth 2.0 �� ��. ���� 구� ����� ����를 조��고 ���� � ��.

Security Scan

The skill's code and instructions match its stated purpose (Google Sheets access via OAuth) and do not request unrelated credentials or external endpoints, but there are a few minor operational/security notes to be aware of (local credential files, pickle usage, and a hard-coded example path).

Purpose & Capability

Name/description promise Google Sheets operations via OAuth 2.0. The included Python modules (oauth_setup.py, sheets_ops.py) implement exactly that (OAuth flow, token storage, Sheets and Drive API calls). No unrelated services, binaries, or credentials are requested.

Instruction Scope

SKILL.md instructs installing Google API client libs and running scripts that read/write credential files in the user's home (~/.google-credentials.json, ~/.google-sheets-token.pickle). It also references a user-specific workspace path (/Users/andrew/...) as an example — odd but not harmful. All runtime actions are limited to Google APIs; there are no instructions to read other system files or send data to non-Google endpoints.

Install Mechanism

No install spec; it's instruction-only and includes local Python scripts. The SKILL.md asks the user to pip install google-api-python-client and related libs — a normal, low-risk approach. No downloads from arbitrary URLs or installer scripts that write unknown binaries.

Credentials

The skill requests no environment variables but relies on local OAuth files (~/.google-credentials.json for client secrets and ~/.google-sheets-token.pickle for the token). Sharing those credentials with other Google skills is explicit in the doc. Two points to consider: (1) storing credentials as a pickle is common in Google samples but can be dangerous if the pickle file is tampered with (pickle.load can execute code on malicious data); (2) the OAuth credential/token grant broad Sheets/Drive scope to any code that can read those files, so file permissions and trust in other skills matter.

Persistence & Privilege

always:false (normal). The skill writes a token file to the user's home directory (expected for OAuth workflows). It does not attempt to modify other skills or system-wide settings. Note: because the skill can be invoked autonomously by the agent (default behavior), it will be able to access any spreadsheets permitted by the OAuth token — this is expected for a Sheets integration.

Assessment

This skill appears to do what it says: run an OAuth flow and call Google Sheets/Drive APIs. Before installing, consider: 1) You must create OAuth client credentials and place them at ~/.google-credentials.json as instructed. 2) The tool saves an OAuth token at ~/.google-sheets-token.pickle; ensure that file is created only by code you trust and keep its filesystem permissions restrictive (it contains sensitive credentials). 3) Pickle files can be dangerous if tampered with — do not reuse an untrusted token file. 4) The OAuth scope grants Sheets/Drive access to any code that can read those files (including other Google-* skills that share the same credential file), so limit scope in Google Cloud Console if you want finer permissions. 5) The SKILL.md contains a hard-coded example path (/Users/andrew/...) — adapt commands to your environment. If you want higher assurance, run these scripts in an isolated environment, review the included Python files (they are short and straightforward), and create a dedicated OAuth client with the minimum scope needed. If the skill attempted network calls to non-Google endpoints, asked for unrelated cloud keys, or used obfuscated code, reassess; none of those are present here.

Google Sheets

Overview

Google Sheets API 를 ���� ���� �������를 조�, ��, ���� � �� ������. OAuth 2.0 ��� ���� ���� Google Sheets � �근����.

Setup

1. OAuth ������� �� ��

�미 구� �린�� ��� �� ��� ������:

# �� ��� �미 ���� ��면 ��
ls ~/.google-credentials.json

2. �존� ��

pip install google-api-python-client google-auth-httplib2 google-auth-oauthlib

3. �� ����

cd /Users/andrew/.openclaw/workspace/skills/google-sheets
python3 scripts/oauth_setup.py

첫 ��� ����� �리고 Google ���� �그� � ��� ����� ����.

Capabilities

������� �기

���� 조�:

"���� ��� '�무��' � �근 10 � 보��"
"A1 ��� D10 �� ���� ���"

��� ��� 조�:

"'2026 � 4 �' ���� 모� ���� 보��"

������� �기

���� ��:

"�무�� ���� � �목 ��: 'OpenClaw ��', ��� '2026-04-21', ��� '2026-04-21', ��� '100%'"

���� ��:

"�무��� 6 �째 � ���� '100%' � ��������"

������� �리

� ������� ��:

"� ������� '����� �리' ����"

��� 목� ��:

"� 구� ��� 목� 보��"

Usage Examples

�� 1: ������� 목� 조�

from scripts.sheets_ops import list_spreadsheets

# ���� 모� ������� 목�
sheets = list_spreadsheets()
for sheet in sheets:
    print(f"{sheet['name']} - {sheet['spreadsheetId']}")

�� 2: ��� �� �기

from scripts.sheets_ops import read_range

# ��� ���� �� �기
data = read_range('SPREADSHEET_ID', 'Sheet1!A1:D10')
for row in data:
    print(row)

�� 3: ���� �기

from scripts.sheets_ops import write_range

# ��� ��� ���� �기
write_range(
    spreadsheet_id='SPREADSHEET_ID',
    range_name='Sheet1!A1:D1',
    values=[['���', '���', '���', '���']]
)

�� 4: ���� �� (Append)

from scripts.sheets_ops import append_rows

# � � ��
append_rows(
    spreadsheet_id='SPREADSHEET_ID',
    range_name='Sheet1!A:D',
    values=[['� ��', '2026-04-21', '', '0%']]
)

�� 5: � ������� ��

from scripts.sheets_ops import create_spreadsheet

# � ������� ��
new_sheet = create_spreadsheet('�무��')
print(f"�� ��: {new_sheet['spreadsheetId']}")

Files Structure

google-sheets/
��� SKILL.md
��� scripts/
    ��� oauth_setup.py      # OAuth 2.0 �� � ���� �리
    ��� sheets_ops.py       # Sheets API �� ����

Security Notes

• OAuth ����� ~/.google-sheets-token.pickle � �����
• ������� ��� ~/.google-credentials.json � ����� (�린�� 공�)
• � ���� .gitignore � ����� ����
• �� ��: https://www.googleapis.com/auth/spreadsheets (������� �체 �근)

Troubleshooting

"OAuth ������� �� ��� ����" ��:

• ~/.google-credentials.json ��� ��� ��
• 구� �린� ��� �� � �미 ��� �� �����

�� ���:

• ���� ��� ���고 ���: rm ~/.google-sheets-token.pickle

�� ��:

• ����� �� � ���: rm ~/.google-sheets-token.pickle && python3 scripts/oauth_setup.py

Integration with Other Google Skills

Same OAuth credentials (~/.google-credentials.json) are shared with google-calendar and google-tasks skills, so you only need to authenticate once!