Gog Jasmine
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a normal Google Workspace CLI skill, but it requires OAuth access that can read and change Google Workspace data.
Install this only if you trust the gog CLI and are comfortable granting it Google Workspace OAuth access. Use a least-privileged account where possible, review OAuth scopes during setup, and require confirmation before any action that sends, creates, updates, appends, clears, copies, or exports data.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The CLI may be able to read or act on Gmail, Calendar, Drive, Contacts, Sheets, and Docs data for the authorized account.
The skill asks the user to authorize a Google account across several Workspace services. This is consistent with the skill purpose, but it is broad delegated account access.
Requires OAuth setup. ... `gog auth add you@gmail.com --services gmail,calendar,drive,contacts,sheets,docs`
Authorize only an account and service set you are comfortable exposing, verify the OAuth client, and revoke access when no longer needed.
If invoked incorrectly, the agent could send messages or alter spreadsheet data.
The documented commands include actions that can send email or modify/clear spreadsheet data. These are expected for a Workspace CLI but can have real account impact.
`gog gmail send --to a@b.com ...`; `gog sheets update ...`; `gog sheets append ...`; `gog sheets clear <sheetId> "Tab!A2:Z"`
Require explicit user confirmation before any send, create, update, append, clear, copy, or other write action.
Trust in the external CLI package is important because it will operate with the authorized Google account.
The skill depends on installing an external Homebrew formula for the executable that will interact with Google Workspace. This is expected for a CLI wrapper, but provenance matters because the CLI receives OAuth-backed authority.
"install":[{"id":"brew","kind":"brew","formula":"steipete/tap/gogcli","bins":["gog"]}]Review the gog CLI project and Homebrew tap source before installation, and keep the package updated from a trusted source.