ClawHub

Backup Gog 20260213 121122

v1.0.0

Google Workspace CLI for Gmail, Calendar, Drive, Contacts, Sheets, and Docs.

⭐ 0· 787·1 current·1 all-time
by@jacobo-create·fork of @steipete/gog (1.0.0)
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill's name/description match the runtime instructions: it requires the 'gog' binary and OAuth client credentials to manage Gmail/Calendar/Drive/Contacts/Sheets/Docs. Nothing in the SKILL.md asks for unrelated services or credentials.
✓
Instruction Scope
SKILL.md only instructs use of the gog CLI and local OAuth client_secret.json and account setup; it does not direct the agent to read unrelated system files or exfiltrate data. It notes using GOG_ACCOUNT to avoid repeating an --account flag.
ℹ
Install Mechanism
Install uses Homebrew formula steipete/tap/gogcli which is a third‑party tap (not an official core formula). Brew installs are common, but third‑party taps and the packaged binary should be audited (check the tap repository, formula contents, and release/source) before installing.
ℹ
Credentials
The skill logically requires OAuth client credentials and a Google account, but requires.env is empty and primary credential is none. SKILL.md also references the GOG_ACCOUNT env var (optional) which is not declared. This is not malicious but is a documentation/metadata omission you should be aware of.
✓
Persistence & Privilege
always:false and default autonomous invocation are appropriate. The skill does not request persistent or system‑wide privileges beyond installing/using the gog binary.
Assessment
This skill appears to do what it says (a CLI wrapper for Google Workspace) but take a few precautions before installing: (1) Inspect the Homebrew tap (steipete/tap) and formula to confirm the binary's source and checksum, or prefer to build from a trusted release; (2) verify the homepage/repository and author identity (there is a mismatch in ownerId metadata between registry and _meta.json), which may indicate packaging/metadata inconsistency; (3) prepare OAuth client_secret.json locally and only grant needed scopes (the SKILL.md lists services); (4) be aware the SKILL.md references GOG_ACCOUNT env var though no env vars are declared—store any credentials securely and don't publish them. If you're unsure, review the brew formula and upstream project before installing the binary.

Like a lobster shell, security has layers — review code before you run it.

latestvk977cyag8r543v9n7ssfbgxpad813b76

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎮 Clawdis
Binsgog

Install

Install gog (brew)
Bins: gog
brew install steipete/tap/gogcli

Comments